Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

alsa-2026:55446

Vulnerability from osv_almalinux

Published

2026-08-17 00:00

Modified

2026-08-18 08:47

Summary

Important: libXfont2 security update

Details

X.Org X11 libXfont2 runtime library

Security Fix(es):

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2026:55446	ADVISORY
	https://access.redhat.com/security/cve/CVE-2026-44950	REPORT
	https://access.redhat.com/security/cve/CVE-2026-59679	REPORT
	https://bugzilla.redhat.com/2509620	REPORT
	https://bugzilla.redhat.com/2509622	REPORT
	https://errata.almalinux.org/8/ALSA-2026-55446.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "libXfont2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.3-2.el8_10.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "libXfont2-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.3-2.el8_10.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "X.Org X11 libXfont2 runtime library  \n\nSecurity Fix(es):  \n\n  * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n  * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:55446",
  "modified": "2026-08-18T08:47:06Z",
  "published": "2026-08-17T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:55446"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2509620"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2509622"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/8/ALSA-2026-55446.html"
    }
  ],
  "related": [
    "CVE-2026-59679",
    "CVE-2026-44950"
  ],
  "summary": "Important: libXfont2 security update"
}

alsa-2026:55447

Vulnerability from osv_almalinux

Published

2026-08-17 00:00

Modified

2026-08-18 08:50

Summary

Important: libXfont2 security update

Details

X.Org X11 libXfont2 runtime library

Security Fix(es):

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2026:55447	ADVISORY
	https://access.redhat.com/security/cve/CVE-2026-44950	REPORT
	https://access.redhat.com/security/cve/CVE-2026-59679	REPORT
	https://bugzilla.redhat.com/2509620	REPORT
	https://bugzilla.redhat.com/2509622	REPORT
	https://errata.almalinux.org/9/ALSA-2026-55447.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "libXfont2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.3-12.el9_8.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "libXfont2-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.3-12.el9_8.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "X.Org X11 libXfont2 runtime library  \n\nSecurity Fix(es):  \n\n  * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n  * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:55447",
  "modified": "2026-08-18T08:50:53Z",
  "published": "2026-08-17T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:55447"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2509620"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2509622"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2026-55447.html"
    }
  ],
  "related": [
    "CVE-2026-59679",
    "CVE-2026-44950"
  ],
  "summary": "Important: libXfont2 security update"
}

alsa-2026:55448

Vulnerability from osv_almalinux

Published

2026-08-17 00:00

Modified

2026-08-18 08:55

Summary

Important: libXfont2 security update

Details

X.Org X11 libXfont2 runtime library

Security Fix(es):

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2026:55448	ADVISORY
	https://access.redhat.com/security/cve/CVE-2026-44950	REPORT
	https://access.redhat.com/security/cve/CVE-2026-59679	REPORT
	https://bugzilla.redhat.com/2509620	REPORT
	https://bugzilla.redhat.com/2509622	REPORT
	https://errata.almalinux.org/10/ALSA-2026-55448.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:10",
        "name": "libXfont2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.6-5.el10_2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:10",
        "name": "libXfont2-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.6-5.el10_2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "X.Org X11 libXfont2 runtime library  \n\nSecurity Fix(es):  \n\n  * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n  * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:55448",
  "modified": "2026-08-18T08:55:38Z",
  "published": "2026-08-17T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:55448"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2509620"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2509622"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/10/ALSA-2026-55448.html"
    }
  ],
  "related": [
    "CVE-2026-59679",
    "CVE-2026-44950"
  ],
  "summary": "Important: libXfont2 security update"
}

RHSA-2026:55446

Vulnerability from csaf_redhat - Published: 2026-08-17 03:24 - Updated: 2026-09-01 12:22

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 31 products

Product	Version	Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products

Product	Version	Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:55446	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:55446",
        "url": "https://access.redhat.com/errata/RHSA-2026:55446"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55446.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T12:22:23+00:00",
      "generator": {
        "date": "2026-09-01T12:22:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:55446",
      "initial_release_date": "2026-08-17T03:24:59+00:00",
      "revision_history": [
        {
          "date": "2026-08-17T03:24:59+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-17T03:24:59+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T12:22:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CRB (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux CRB (v. 8)",
                  "product_id": "CRB-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_10.3.i686",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_10.3.i686",
                  "product_id": "libXfont2-0:2.0.3-2.el8_10.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
                  "product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_10.3.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_10.3.x86_64",
                  "product_id": "libXfont2-0:2.0.3-2.el8_10.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64",
                  "product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_10.3.s390x",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_10.3.s390x",
                  "product_id": "libXfont2-0:2.0.3-2.el8_10.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
                  "product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_10.3.src",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_10.3.src",
                  "product_id": "libXfont2-0:2.0.3-2.el8_10.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_10.3.aarch64",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_10.3.aarch64",
                  "product_id": "libXfont2-0:2.0.3-2.el8_10.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
                  "product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
                  "product_id": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
                  "product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_10.3.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_10.3.i686",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_10.3.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_10.3.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_10.3.src",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_10.3.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T03:24:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55446"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T03:24:59+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55446"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

RHSA-2026:59311

Vulnerability from csaf_redhat - Published: 2026-08-25 06:29 - Updated: 2026-09-01 12:22

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:59311	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:59311",
        "url": "https://access.redhat.com/errata/RHSA-2026:59311"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59311.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T12:22:26+00:00",
      "generator": {
        "date": "2026-09-01T12:22:26+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:59311",
      "initial_release_date": "2026-08-25T06:29:04+00:00",
      "revision_history": [
        {
          "date": "2026-08-25T06:29:04+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-25T06:29:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T12:22:26+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                  "product_id": "AppStream-9.2.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_2.3.src",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_2.3.src",
                  "product_id": "libXfont2-0:2.0.3-12.el9_2.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_2.3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_2.3.aarch64",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_2.3.aarch64",
                  "product_id": "libXfont2-0:2.0.3-12.el9_2.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_2.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_2.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_2.3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_2.3.i686",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_2.3.i686",
                  "product_id": "libXfont2-0:2.0.3-12.el9_2.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_2.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_2.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_2.3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_2.3.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_2.3.x86_64",
                  "product_id": "libXfont2-0:2.0.3-12.el9_2.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_2.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_2.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_2.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
                  "product_id": "libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_2.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_2.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_2.3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_2.3.s390x",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_2.3.s390x",
                  "product_id": "libXfont2-0:2.0.3-12.el9_2.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_2.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_2.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_2.3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_2.3.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_2.3.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_2.3.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_2.3.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_2.3.src",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_2.3.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-25T06:29:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59311"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src",
          "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
          "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
          "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-25T06:29:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59311"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.src",
            "AppStream-9.2.0.Z.E4S:libXfont2-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_2.3.x86_64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.aarch64",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.i686",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.ppc64le",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.s390x",
            "AppStream-9.2.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

RHSA-2026:59312

Vulnerability from csaf_redhat - Published: 2026-08-25 06:53 - Updated: 2026-09-01 12:22

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:59312	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:59312",
        "url": "https://access.redhat.com/errata/RHSA-2026:59312"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59312.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T12:22:27+00:00",
      "generator": {
        "date": "2026-09-01T12:22:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:59312",
      "initial_release_date": "2026-08-25T06:53:44+00:00",
      "revision_history": [
        {
          "date": "2026-08-25T06:53:44+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-25T06:53:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T12:22:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
                  "product_id": "AppStream-9.4.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_4.3.src",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_4.3.src",
                  "product_id": "libXfont2-0:2.0.3-12.el9_4.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_4.3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_4.3.aarch64",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_4.3.aarch64",
                  "product_id": "libXfont2-0:2.0.3-12.el9_4.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_4.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_4.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_4.3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_4.3.i686",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_4.3.i686",
                  "product_id": "libXfont2-0:2.0.3-12.el9_4.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_4.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_4.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_4.3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_4.3.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_4.3.x86_64",
                  "product_id": "libXfont2-0:2.0.3-12.el9_4.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_4.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_4.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_4.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
                  "product_id": "libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_4.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_4.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_4.3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_4.3.s390x",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_4.3.s390x",
                  "product_id": "libXfont2-0:2.0.3-12.el9_4.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_4.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_4.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_4.3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_4.3.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_4.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_4.3.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_4.3.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_4.3.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_4.3.src",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_4.3.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-25T06:53:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59312"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src",
          "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
          "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
          "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-25T06:53:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:59312"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.src",
            "AppStream-9.4.0.Z.E4S:libXfont2-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-12.el9_4.3.x86_64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.aarch64",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.i686",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.ppc64le",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.s390x",
            "AppStream-9.4.0.Z.E4S:libXfont2-debugsource-0:2.0.3-12.el9_4.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

RHSA-2026:61390

Vulnerability from csaf_redhat - Published: 2026-08-31 14:41 - Updated: 2026-09-01 12:22

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 31 products

Product	Version	Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products

Product	Version	Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:61390	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:61390",
        "url": "https://access.redhat.com/errata/RHSA-2026:61390"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61390.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T12:22:27+00:00",
      "generator": {
        "date": "2026-09-01T12:22:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:61390",
      "initial_release_date": "2026-08-31T14:41:10+00:00",
      "revision_history": [
        {
          "date": "2026-08-31T14:41:10+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-31T14:41:10+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T12:22:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                  "product_id": "AppStream-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
                  "product_id": "CRB-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.6::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_6.3.src",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_6.3.src",
                  "product_id": "libXfont2-0:2.0.3-12.el9_6.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_6.3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_6.3.aarch64",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_6.3.aarch64",
                  "product_id": "libXfont2-0:2.0.3-12.el9_6.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_6.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_6.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_6.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_6.3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_6.3.i686",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_6.3.i686",
                  "product_id": "libXfont2-0:2.0.3-12.el9_6.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_6.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_6.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_6.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_6.3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_6.3.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_6.3.x86_64",
                  "product_id": "libXfont2-0:2.0.3-12.el9_6.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_6.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_6.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_6.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_6.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
                  "product_id": "libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_6.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_6.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_6.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_6.3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_6.3.s390x",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_6.3.s390x",
                  "product_id": "libXfont2-0:2.0.3-12.el9_6.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_6.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_6.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_6.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_6.3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_6.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_6.3.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_6.3.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_6.3.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_6.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_6.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_6.3.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_6.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_6.3.src",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_6.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_6.3.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-31T14:41:10+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61390"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src",
          "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
          "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
          "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
          "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
          "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
          "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-31T14:41:10+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61390"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.src",
            "AppStream-9.6.0.Z.EUS:libXfont2-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "AppStream-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-debugsource-0:2.0.3-12.el9_6.3.x86_64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.aarch64",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.i686",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.ppc64le",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.s390x",
            "CRB-9.6.0.Z.EUS:libXfont2-devel-0:2.0.3-12.el9_6.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

RHSA-2026:61755

Vulnerability from csaf_redhat - Published: 2026-08-31 17:48 - Updated: 2026-09-01 12:22

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:61755	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:61755",
        "url": "https://access.redhat.com/errata/RHSA-2026:61755"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61755.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T12:22:28+00:00",
      "generator": {
        "date": "2026-09-01T12:22:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:61755",
      "initial_release_date": "2026-08-31T17:48:41+00:00",
      "revision_history": [
        {
          "date": "2026-08-31T17:48:41+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-31T17:48:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T12:22:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
                  "product_id": "AppStream-8.6.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_aus:8.6::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
                  "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_6.2.src",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_6.2.src",
                  "product_id": "libXfont2-0:2.0.3-2.el8_6.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_6.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_6.2.i686",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_6.2.i686",
                  "product_id": "libXfont2-0:2.0.3-2.el8_6.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_6.2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_6.2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_6.2?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_6.2.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_6.2.x86_64",
                  "product_id": "libXfont2-0:2.0.3-2.el8_6.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_6.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_6.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_6.2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_6.2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_6.2.i686",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_6.2.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_6.2.src",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_6.2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_6.2.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_6.2.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_6.2.i686",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_6.2.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_6.2.src",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_6.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_6.2.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src",
          "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-31T17:48:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61755"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src",
          "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
          "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-31T17:48:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61755"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.AUS:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.src",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_6.2.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.i686",
            "AppStream-8.6.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_6.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

RHSA-2026:61756

Vulnerability from csaf_redhat - Published: 2026-08-31 17:51 - Updated: 2026-09-01 12:22

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 17 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 17 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:61756	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:61756",
        "url": "https://access.redhat.com/errata/RHSA-2026:61756"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61756.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T12:22:29+00:00",
      "generator": {
        "date": "2026-09-01T12:22:29+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:61756",
      "initial_release_date": "2026-08-31T17:51:11+00:00",
      "revision_history": [
        {
          "date": "2026-08-31T17:51:11+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-31T17:51:11+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T12:22:29+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
                  "product_id": "AppStream-8.8.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:8.8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
                  "product_id": "AppStream-8.8.0.Z.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_tus:8.8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_8.2.src",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_8.2.src",
                  "product_id": "libXfont2-0:2.0.3-2.el8_8.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_8.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
                  "product_id": "libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_8.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_8.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_8.2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_8.2.i686",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_8.2.i686",
                  "product_id": "libXfont2-0:2.0.3-2.el8_8.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_8.2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_8.2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_8.2?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_8.2.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_8.2.x86_64",
                  "product_id": "libXfont2-0:2.0.3-2.el8_8.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_8.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_8.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_8.2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_8.2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_8.2.i686",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_8.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_8.2.src",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_8.2.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_8.2.i686 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_8.2.i686",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_8.2.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_8.2.src",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_8.2.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
          "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src",
          "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
          "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
          "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src",
          "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-31T17:51:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61756"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
          "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src",
          "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
          "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
          "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src",
          "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
          "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
          "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-31T17:51:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61756"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.E4S:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.ppc64le",
            "AppStream-8.8.0.Z.E4S:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.src",
            "AppStream-8.8.0.Z.TUS:libXfont2-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debuginfo-0:2.0.3-2.el8_8.2.x86_64",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.i686",
            "AppStream-8.8.0.Z.TUS:libXfont2-debugsource-0:2.0.3-2.el8_8.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

RHSA-2026:61995

Vulnerability from csaf_redhat - Published: 2026-09-01 12:22 - Updated: 2026-09-01 14:16

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:61995	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:61995",
        "url": "https://access.redhat.com/errata/RHSA-2026:61995"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61995.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T14:16:00+00:00",
      "generator": {
        "date": "2026-09-01T14:16:00+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:61995",
      "initial_release_date": "2026-09-01T12:22:04+00:00",
      "revision_history": [
        {
          "date": "2026-09-01T12:22:04+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-01T12:22:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T14:16:00+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
                  "product_id": "AppStream-8.4.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_aus:8.4::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
                  "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_4.2.src",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_4.2.src",
                  "product_id": "libXfont2-0:2.0.3-2.el8_4.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_4.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_4.2.i686",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_4.2.i686",
                  "product_id": "libXfont2-0:2.0.3-2.el8_4.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_4.2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_4.2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_4.2?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-2.el8_4.2.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.3-2.el8_4.2.x86_64",
                  "product_id": "libXfont2-0:2.0.3-2.el8_4.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_4.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_4.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_4.2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_4.2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_4.2.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_4.2.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_4.2.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_4.2.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_4.2.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_4.2.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_4.2.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_4.2.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-2.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-2.el8_4.2.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src",
          "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T12:22:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61995"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src",
          "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T12:22:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61995"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.AUS:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.AUS:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debuginfo-0:2.0.3-2.el8_4.2.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:libXfont2-debugsource-0:2.0.3-2.el8_4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

RHSA-2026:55447

Vulnerability from csaf_opensuse - Published: 2026-08-17 06:08 - Updated: 2026-09-01 12:22

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 31 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:55447	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:55447",
        "url": "https://access.redhat.com/errata/RHSA-2026:55447"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55447.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T12:22:23+00:00",
      "generator": {
        "date": "2026-09-01T12:22:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:55447",
      "initial_release_date": "2026-08-17T06:08:30+00:00",
      "revision_history": [
        {
          "date": "2026-08-17T06:08:30+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-17T06:08:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T12:22:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
                  "product_id": "CRB-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_8.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_8.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_8.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_8.3.aarch64",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_8.3.aarch64",
                  "product_id": "libXfont2-0:2.0.3-12.el9_8.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_8.3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_8.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_8.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_8.3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_8.3.i686",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_8.3.i686",
                  "product_id": "libXfont2-0:2.0.3-12.el9_8.3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_8.3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_8.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_8.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_8.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_8.3.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_8.3.x86_64",
                  "product_id": "libXfont2-0:2.0.3-12.el9_8.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_8.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_8.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_8.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_8.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
                  "product_id": "libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_8.3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
                "product": {
                  "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
                  "product_id": "libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-12.el9_8.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
                  "product_id": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-12.el9_8.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
                  "product_id": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-12.el9_8.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_8.3.s390x",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_8.3.s390x",
                  "product_id": "libXfont2-0:2.0.3-12.el9_8.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_8.3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.3-12.el9_8.3.src",
                "product": {
                  "name": "libXfont2-0:2.0.3-12.el9_8.3.src",
                  "product_id": "libXfont2-0:2.0.3-12.el9_8.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.3-12.el9_8.3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_8.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_8.3.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_8.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_8.3.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_8.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_8.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_8.3.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_8.3.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_8.3.src",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.3-12.el9_8.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.3-12.el9_8.3.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64"
        },
        "product_reference": "libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T06:08:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55447"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T06:08:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55447"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.src",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-12.el9_8.3.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.i686",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-12.el9_8.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

RHSA-2026:55448

Vulnerability from csaf_opensuse - Published: 2026-08-17 04:19 - Updated: 2026-09-01 12:22

Summary

Red Hat Security Advisory: libXfont2 security update

Severity

Important

Notes

Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 25 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix
Unresolved product id: CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 25 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:55448	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-44950	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509622	external
https://www.cve.org/CVERecord?id=CVE-2026-44950	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44950	external
https://access.redhat.com/security/cve/CVE-2026-59679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509620	external
https://www.cve.org/CVERecord?id=CVE-2026-59679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59679	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:55448",
        "url": "https://access.redhat.com/errata/RHSA-2026:55448"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2509620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
      },
      {
        "category": "external",
        "summary": "2509622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55448.json"
      }
    ],
    "title": "Red Hat Security Advisory: libXfont2 security update",
    "tracking": {
      "current_release_date": "2026-09-01T12:22:26+00:00",
      "generator": {
        "date": "2026-09-01T12:22:26+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:55448",
      "initial_release_date": "2026-08-17T04:19:40+00:00",
      "revision_history": [
        {
          "date": "2026-08-17T04:19:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-17T04:19:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T12:22:26+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                  "product_id": "CRB-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.6-5.el10_2.3.x86_64",
                "product": {
                  "name": "libXfont2-0:2.0.6-5.el10_2.3.x86_64",
                  "product_id": "libXfont2-0:2.0.6-5.el10_2.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.6-5.el10_2.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
                  "product_id": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.6-5.el10_2.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
                  "product_id": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.6-5.el10_2.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64",
                "product": {
                  "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64",
                  "product_id": "libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.6-5.el10_2.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.6-5.el10_2.3.src",
                "product": {
                  "name": "libXfont2-0:2.0.6-5.el10_2.3.src",
                  "product_id": "libXfont2-0:2.0.6-5.el10_2.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.6-5.el10_2.3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.6-5.el10_2.3.aarch64",
                "product": {
                  "name": "libXfont2-0:2.0.6-5.el10_2.3.aarch64",
                  "product_id": "libXfont2-0:2.0.6-5.el10_2.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.6-5.el10_2.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
                  "product_id": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.6-5.el10_2.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
                  "product_id": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.6-5.el10_2.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
                "product": {
                  "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
                  "product_id": "libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.6-5.el10_2.3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
                "product": {
                  "name": "libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
                  "product_id": "libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.6-5.el10_2.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
                  "product_id": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.6-5.el10_2.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
                  "product_id": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.6-5.el10_2.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
                "product": {
                  "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
                  "product_id": "libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.6-5.el10_2.3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-0:2.0.6-5.el10_2.3.s390x",
                "product": {
                  "name": "libXfont2-0:2.0.6-5.el10_2.3.s390x",
                  "product_id": "libXfont2-0:2.0.6-5.el10_2.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2@2.0.6-5.el10_2.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
                "product": {
                  "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
                  "product_id": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.6-5.el10_2.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
                "product": {
                  "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
                  "product_id": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.6-5.el10_2.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
                "product": {
                  "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
                  "product_id": "libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXfont2-devel@2.0.6-5.el10_2.3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.6-5.el10_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64"
        },
        "product_reference": "libXfont2-0:2.0.6-5.el10_2.3.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.6-5.el10_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le"
        },
        "product_reference": "libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.6-5.el10_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x"
        },
        "product_reference": "libXfont2-0:2.0.6-5.el10_2.3.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.6-5.el10_2.3.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src"
        },
        "product_reference": "libXfont2-0:2.0.6-5.el10_2.3.src",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-0:2.0.6-5.el10_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64"
        },
        "product_reference": "libXfont2-0:2.0.6-5.el10_2.3.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64"
        },
        "product_reference": "libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64"
        },
        "product_reference": "libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64"
        },
        "product_reference": "libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le"
        },
        "product_reference": "libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x"
        },
        "product_reference": "libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64"
        },
        "product_reference": "libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-07-30T21:49:45.599000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64",
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x",
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src",
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64",
          "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
          "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
          "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
          "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
          "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
          "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
          "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
          "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
          "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
          "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
          "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
          "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
          "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
          "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
          "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
          "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
          "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
          "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
          "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
          "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:19:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55448"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
    },
    {
      "cve": "CVE-2026-59679",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-30T21:28:38.411000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64",
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x",
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src",
          "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64",
          "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
          "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
          "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
          "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
          "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
          "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
          "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
          "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
          "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
          "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
          "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
          "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
          "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
          "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
          "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
          "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
          "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
          "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
          "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
          "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
        }
      ],
      "release_date": "2026-08-05T10:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:19:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55448"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.src",
            "AppStream-10.2.Z:libXfont2-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "AppStream-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debuginfo-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-debugsource-0:2.0.6-5.el10_2.3.x86_64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.aarch64",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.ppc64le",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.s390x",
            "CRB-10.2.Z:libXfont2-devel-0:2.0.6-5.el10_2.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
    }
  ]
}

SUSE-SU-2026:3499-1

Vulnerability from csaf_suse - Published: 2026-08-05 11:56 - Updated: 2026-08-05 11:56

Summary

Security update for libXfont2

Severity

Critical

Notes

Title of the patch: Security update for libXfont2

Description of the patch: This update for libXfont2 fixes the following issues: - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661). - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#1272660).

Patchnames: SUSE-2026-3499,SUSE-SLE-SERVER-12-SP5-LTSS-2026-3499,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3499

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2026-44950

9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 9 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64	—	Vendor Fix

Threats

Impact critical

CVE-2026-59679

9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 9 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64	—	Vendor Fix

Threats

Impact critical

References

13 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1272660	self
https://bugzilla.suse.com/1272661	self
https://www.suse.com/security/cve/CVE-2026-44950/	self
https://www.suse.com/security/cve/CVE-2026-59679/	self
https://www.suse.com/security/cve/CVE-2026-44950	external
https://bugzilla.suse.com/1268514	external
https://bugzilla.suse.com/1272661	external
https://www.suse.com/security/cve/CVE-2026-59679	external
https://bugzilla.suse.com/1272660	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libXfont2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libXfont2 fixes the following issues:\n\n- CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661).\n- CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#1272660).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-3499,SUSE-SLE-SERVER-12-SP5-LTSS-2026-3499,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3499",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3499-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:3499-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263499-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:3499-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028148.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272660",
        "url": "https://bugzilla.suse.com/1272660"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272661",
        "url": "https://bugzilla.suse.com/1272661"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44950 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44950/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59679 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59679/"
      }
    ],
    "title": "Security update for libXfont2",
    "tracking": {
      "current_release_date": "2026-08-05T11:56:49Z",
      "generator": {
        "date": "2026-08-05T11:56:49Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:3499-1",
      "initial_release_date": "2026-08-05T11:56:49Z",
      "revision_history": [
        {
          "date": "2026-08-05T11:56:49Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-2-2.0.3-3.6.1.aarch64",
                "product": {
                  "name": "libXfont2-2-2.0.3-3.6.1.aarch64",
                  "product_id": "libXfont2-2-2.0.3-3.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-2.0.3-3.6.1.aarch64",
                "product": {
                  "name": "libXfont2-devel-2.0.3-3.6.1.aarch64",
                  "product_id": "libXfont2-devel-2.0.3-3.6.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-2-64bit-2.0.3-3.6.1.aarch64_ilp32",
                "product": {
                  "name": "libXfont2-2-64bit-2.0.3-3.6.1.aarch64_ilp32",
                  "product_id": "libXfont2-2-64bit-2.0.3-3.6.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-64bit-2.0.3-3.6.1.aarch64_ilp32",
                "product": {
                  "name": "libXfont2-devel-64bit-2.0.3-3.6.1.aarch64_ilp32",
                  "product_id": "libXfont2-devel-64bit-2.0.3-3.6.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-2-2.0.3-3.6.1.i586",
                "product": {
                  "name": "libXfont2-2-2.0.3-3.6.1.i586",
                  "product_id": "libXfont2-2-2.0.3-3.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-2.0.3-3.6.1.i586",
                "product": {
                  "name": "libXfont2-devel-2.0.3-3.6.1.i586",
                  "product_id": "libXfont2-devel-2.0.3-3.6.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-2-2.0.3-3.6.1.ppc64le",
                "product": {
                  "name": "libXfont2-2-2.0.3-3.6.1.ppc64le",
                  "product_id": "libXfont2-2-2.0.3-3.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-2.0.3-3.6.1.ppc64le",
                "product": {
                  "name": "libXfont2-devel-2.0.3-3.6.1.ppc64le",
                  "product_id": "libXfont2-devel-2.0.3-3.6.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-2-2.0.3-3.6.1.s390",
                "product": {
                  "name": "libXfont2-2-2.0.3-3.6.1.s390",
                  "product_id": "libXfont2-2-2.0.3-3.6.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-2.0.3-3.6.1.s390",
                "product": {
                  "name": "libXfont2-devel-2.0.3-3.6.1.s390",
                  "product_id": "libXfont2-devel-2.0.3-3.6.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-2-2.0.3-3.6.1.s390x",
                "product": {
                  "name": "libXfont2-2-2.0.3-3.6.1.s390x",
                  "product_id": "libXfont2-2-2.0.3-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-2-32bit-2.0.3-3.6.1.s390x",
                "product": {
                  "name": "libXfont2-2-32bit-2.0.3-3.6.1.s390x",
                  "product_id": "libXfont2-2-32bit-2.0.3-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-2.0.3-3.6.1.s390x",
                "product": {
                  "name": "libXfont2-devel-2.0.3-3.6.1.s390x",
                  "product_id": "libXfont2-devel-2.0.3-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-32bit-2.0.3-3.6.1.s390x",
                "product": {
                  "name": "libXfont2-devel-32bit-2.0.3-3.6.1.s390x",
                  "product_id": "libXfont2-devel-32bit-2.0.3-3.6.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXfont2-2-2.0.3-3.6.1.x86_64",
                "product": {
                  "name": "libXfont2-2-2.0.3-3.6.1.x86_64",
                  "product_id": "libXfont2-2-2.0.3-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-2-32bit-2.0.3-3.6.1.x86_64",
                "product": {
                  "name": "libXfont2-2-32bit-2.0.3-3.6.1.x86_64",
                  "product_id": "libXfont2-2-32bit-2.0.3-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-2.0.3-3.6.1.x86_64",
                "product": {
                  "name": "libXfont2-devel-2.0.3-3.6.1.x86_64",
                  "product_id": "libXfont2-devel-2.0.3-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2-devel-32bit-2.0.3-3.6.1.x86_64",
                "product": {
                  "name": "libXfont2-devel-32bit-2.0.3-3.6.1.x86_64",
                  "product_id": "libXfont2-devel-32bit-2.0.3-3.6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXfont2-2-2.0.3-3.6.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
        },
        "product_reference": "libXfont2-2-2.0.3-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44950"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44950",
          "url": "https://www.suse.com/security/cve/CVE-2026-44950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268514 for CVE-2026-44950",
          "url": "https://bugzilla.suse.com/1268514"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272661 for CVE-2026-44950",
          "url": "https://bugzilla.suse.com/1272661"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T11:56:49Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-44950"
    },
    {
      "cve": "CVE-2026-59679",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59679"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59679",
          "url": "https://www.suse.com/security/cve/CVE-2026-59679"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272660 for CVE-2026-59679",
          "url": "https://bugzilla.suse.com/1272660"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T11:56:49Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-59679"
    }
  ]
}

ubuntu-cve-2026-44950

Vulnerability from osv_ubuntu

Published

2026-08-05 00:00

Modified

2026-08-05 00:00

Summary

Details

[Font Server Client Cumulative Glyph Data Heap Buffer Overflow]

Severity

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-44950	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-44950	REPORT
	https://www.openwall.com/lists/oss-security/2026/…	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libxfont1",
            "binary_version": "1:1.4.7-1ubuntu0.4+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "libxfont",
        "purl": "pkg:deb/ubuntu/libxfont@1:1.4.7-1ubuntu0.4+esm2?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:1.4.6-1",
        "1:1.4.6-1ubuntu1",
        "1:1.4.7-1",
        "1:1.4.7-1ubuntu0.1",
        "1:1.4.7-1ubuntu0.2",
        "1:1.4.7-1ubuntu0.3",
        "1:1.4.7-1ubuntu0.4",
        "1:1.4.7-1ubuntu0.4+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libxfont1",
            "binary_version": "1:1.5.1-1ubuntu0.16.04.4+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "libxfont",
        "purl": "pkg:deb/ubuntu/libxfont@1:1.5.1-1ubuntu0.16.04.4+esm2?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:1.5.1-1",
        "1:1.5.1-1ubuntu0.16.04.1",
        "1:1.5.1-1ubuntu0.16.04.2",
        "1:1.5.1-1ubuntu0.16.04.3",
        "1:1.5.1-1ubuntu0.16.04.4",
        "1:1.5.1-1ubuntu0.16.04.4+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libxfont2",
            "binary_version": "1:2.0.1-3~ubuntu16.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "libxfont2",
        "purl": "pkg:deb/ubuntu/libxfont2@1:2.0.1-3~ubuntu16.04.3?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.0.1-3~ubuntu16.04.1",
        "1:2.0.1-3~ubuntu16.04.2",
        "1:2.0.1-3~ubuntu16.04.3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libxfont2",
            "binary_version": "1:2.0.3-1ubuntu0.1~esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "libxfont",
        "purl": "pkg:deb/ubuntu/libxfont@1:2.0.3-1ubuntu0.1~esm2?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.0.1-3ubuntu1",
        "1:2.0.1-4",
        "1:2.0.1-4ubuntu1",
        "1:2.0.3-1",
        "1:2.0.3-1ubuntu0.1~esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libxfont2",
            "binary_version": "1:2.0.3-1ubuntu0.20.04.1~esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "libxfont",
        "purl": "pkg:deb/ubuntu/libxfont@1:2.0.3-1ubuntu0.20.04.1~esm2?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.0.3-1",
        "1:2.0.3-1ubuntu0.20.04.1~esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libxfont2",
            "binary_version": "1:2.0.5-1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "libxfont",
        "purl": "pkg:deb/ubuntu/libxfont@1:2.0.5-1ubuntu0.2?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.0.4-1build3",
        "1:2.0.5-1",
        "1:2.0.5-1build1",
        "1:2.0.5-1ubuntu0.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libxfont2",
            "binary_version": "1:2.0.6-1+deb13u1build0.24.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "libxfont",
        "purl": "pkg:deb/ubuntu/libxfont@1:2.0.6-1+deb13u1build0.24.04.2?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.0.6-1",
        "1:2.0.6-1build1",
        "1:2.0.6-1+deb13u1build0.24.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libxfont2",
            "binary_version": "1:2.0.6-2ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "libxfont",
        "purl": "pkg:deb/ubuntu/libxfont@1:2.0.6-2ubuntu0.2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.0.6-1build1",
        "1:2.0.6-1build2",
        "1:2.0.6-2",
        "1:2.0.6-2ubuntu0.2"
      ]
    }
  ],
  "aliases": [],
  "details": "[Font Server Client Cumulative Glyph Data Heap Buffer Overflow]",
  "id": "UBUNTU-CVE-2026-44950",
  "modified": "2026-08-05T00:00:00Z",
  "published": "2026-08-05T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-44950"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2026/08/05/1"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-44950"
  ]
}

WID-SEC-W-2026-2658

Vulnerability from csaf_certbund - Published: 2026-08-04 22:00 - Updated: 2026-08-31 22:00

Summary

X.Org X11 (libXfont2): Mehrere Schwachstellen ermöglichen Privilegieneskalation und Denial of Service

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Das X Window System dient der Erzeugung grafischer Oberflächen auf Unix Systemen.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um seine Privilegien zu erhöhen, und um einen Denial of Service Angriff durchzuführen.

Betroffene Betriebssysteme: - Linux - UNIX

CVE-2026-44950

Affected products

Known affected 7 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Open Source X.Org X11 libXfont2 <2.0.9 Open Source / X.Org X11		libXfont2 <2.0.9
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2026-59679

Affected products

Known affected 7 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Open Source X.Org X11 libXfont2 <2.0.9 Open Source / X.Org X11		libXfont2 <2.0.9
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

References

25 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://seclists.org/oss-sec/2026/q3/436	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.opensuse.org/archives/list/security…	external
https://access.redhat.com/errata/RHSA-2026:55447	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:55448	external
https://access.redhat.com/errata/RHSA-2026:55446	external
https://linux.oracle.com/errata/ELSA-2026-55447.html	external
https://linux.oracle.com/errata/ELSA-2026-55448.html	external
https://errata.build.resf.org/RLSA-2026:55446	external
https://errata.build.resf.org/RLSA-2026:55447	external
https://errata.build.resf.org/RLSA-2026:55448	external
https://linux.oracle.com/errata/ELSA-2026-55446.html	external
https://access.redhat.com/errata/RHSA-2026:59312	external
https://access.redhat.com/errata/RHSA-2026:59311	external
https://access.redhat.com/errata/RHSA-2026:61390	external
https://access.redhat.com/errata/RHSA-2026:61755	external
https://access.redhat.com/errata/RHSA-2026:61756	external
https://alas.aws.amazon.com/AL2/ALAS2-2026-3889.html	external
https://alas.aws.amazon.com/AL2/ALAS2-2026-3890.html	external
https://access.redhat.com/errata/RHSA-2026:61995	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das X Window System dient der Erzeugung grafischer Oberfl\u00e4chen auf Unix Systemen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um seine Privilegien zu erh\u00f6hen, und um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-2658 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2658.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-2658 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2658"
      },
      {
        "category": "external",
        "summary": "X.Org Security Advisory vom 2026-08-04",
        "url": "https://seclists.org/oss-sec/2026/q3/436"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:3500-1 vom 2026-08-05",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028147.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:3499-1 vom 2026-08-05",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028148.html"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2026:11463-1 vom 2026-08-08",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PTGMTNHE2PKU34GA4TVT54ZYUWSQDO6P/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:55447 vom 2026-08-17",
        "url": "https://access.redhat.com/errata/RHSA-2026:55447"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:23151-1 vom 2026-08-14",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028300.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:23128-1 vom 2026-08-14",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028318.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:55448 vom 2026-08-17",
        "url": "https://access.redhat.com/errata/RHSA-2026:55448"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:55446 vom 2026-08-17",
        "url": "https://access.redhat.com/errata/RHSA-2026:55446"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-55447 vom 2026-08-17",
        "url": "https://linux.oracle.com/errata/ELSA-2026-55447.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-55448 vom 2026-08-17",
        "url": "https://linux.oracle.com/errata/ELSA-2026-55448.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:55446 vom 2026-08-17",
        "url": "https://errata.build.resf.org/RLSA-2026:55446"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:55447 vom 2026-08-17",
        "url": "https://errata.build.resf.org/RLSA-2026:55447"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:55448 vom 2026-08-17",
        "url": "https://errata.build.resf.org/RLSA-2026:55448"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-55446 vom 2026-08-19",
        "url": "https://linux.oracle.com/errata/ELSA-2026-55446.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:59312 vom 2026-08-25",
        "url": "https://access.redhat.com/errata/RHSA-2026:59312"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:59311 vom 2026-08-25",
        "url": "https://access.redhat.com/errata/RHSA-2026:59311"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:61390 vom 2026-09-01",
        "url": "https://access.redhat.com/errata/RHSA-2026:61390"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:61755 vom 2026-08-31",
        "url": "https://access.redhat.com/errata/RHSA-2026:61755"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:61756 vom 2026-08-31",
        "url": "https://access.redhat.com/errata/RHSA-2026:61756"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2026-3889 vom 2026-09-01",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3889.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2026-3890 vom 2026-09-01",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3890.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:61995 vom 2026-09-01",
        "url": "https://access.redhat.com/errata/RHSA-2026:61995"
      }
    ],
    "source_lang": "en-US",
    "title": "X.Org X11 (libXfont2): Mehrere Schwachstellen erm\u00f6glichen Privilegieneskalation und Denial of Service",
    "tracking": {
      "current_release_date": "2026-08-31T22:00:00.000+00:00",
      "generator": {
        "date": "2026-09-01T11:41:10.220+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-2658",
      "initial_release_date": "2026-08-04T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-08-04T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-08-05T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-08-09T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von openSUSE aufgenommen"
        },
        {
          "date": "2026-08-16T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Red Hat und SUSE aufgenommen"
        },
        {
          "date": "2026-08-17T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-08-19T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-08-24T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-08-31T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat und Amazon aufgenommen"
        }
      ],
      "status": "final",
      "version": "8"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "libXfont2 \u003c2.0.9",
                "product": {
                  "name": "Open Source X.Org X11 libXfont2 \u003c2.0.9",
                  "product_id": "T057547"
                }
              },
              {
                "category": "product_version",
                "name": "libXfont2 2.0.9",
                "product": {
                  "name": "Open Source X.Org X11 libXfont2 2.0.9",
                  "product_id": "T057547-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:x:x.org_x11:libxfont2__2.0.9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "X.Org X11"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T056236",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T054581",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T054646",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "SUSE openSUSE",
            "product": {
              "name": "SUSE openSUSE",
              "product_id": "T055946",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:opensuse:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44950",
      "product_status": {
        "known_affected": [
          "T056236",
          "T057547",
          "T054581",
          "67646",
          "T055946",
          "398363",
          "T054646"
        ]
      },
      "release_date": "2026-08-04T22:00:00.000+00:00",
      "title": "CVE-2026-44950"
    },
    {
      "cve": "CVE-2026-59679",
      "product_status": {
        "known_affected": [
          "T056236",
          "T057547",
          "T054581",
          "67646",
          "T055946",
          "398363",
          "T054646"
        ]
      },
      "release_date": "2026-08-04T22:00:00.000+00:00",
      "title": "CVE-2026-59679"
    }
  ]
}

Find a vulnerability

Search criteria

Related vulnerabilities

alsa-2026:55446

Vulnerability from osv_almalinux

alsa-2026:55447

Vulnerability from osv_almalinux

alsa-2026:55448

Vulnerability from osv_almalinux

RHSA-2026:55446

RHSA-2026:59311

RHSA-2026:59312

RHSA-2026:61390

RHSA-2026:61755

RHSA-2026:61756

RHSA-2026:61995

RHSA-2026:55447

RHSA-2026:55448

SUSE-SU-2026:3499-1

ubuntu-cve-2026-44950

Vulnerability from osv_ubuntu

WID-SEC-W-2026-2658