OESA-2026-3055 libXfont2 security update

libXfont provides the core of the legacy X11 font system, handling the index files fonts.dir, fonts.alias, fonts.scale, the various font file formats, and rasterizing them. contains runtime library. Security Fixes: A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an...

openSUSE 16 Security Update : libXfont2 (openSUSE-SU-2026:21284-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21284-1 advisory. This update for libXfont2 fixes the following issues - CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow bsc1269018. -...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...

Security update for libXfont2 (important)

openSUSE security update: security update for libxfont2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21284-1 Rating: important References: bsc1269018 bsc1269019 bsc1269020 Cross-References: CVE-2026-56001 CVE-2026-56002 CVE-2026-56003 CVSS scores...

CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 43 Update: libXfont2-2.0.8-1.fc43

X.Org X11 libXfont2 runtime library...

Fedora 43 : libXfont2 (2026-18ea3f47f8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-18ea3f47f8 advisory. libXfont2 2.0.8 CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Tenable has extracted the preceding description block directly from the Fedora securi...

[SECURITY] Fedora 44 Update: libXfont2-2.0.8-1.fc44

X.Org X11 libXfont2 runtime library...

Fedora 44 : libXfont2 (2026-43652cd5e8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-43652cd5e8 advisory. libXfont2 2.0.8 CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Tenable has extracted the preceding description block directly from the Fedora securi...

libXfont2 PCF Font Parsing Heap Buffer Overflow

...

libXfont2 computeProps Property Buffer Heap Buffer Overflow

...

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

...

SUSE CVE-2026-56001

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont...

SUSE CVE-2026-56002

A heap bufferflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server...

SUSE CVE-2026-56003

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...

SUSE SLES12 Security Update : libXfont2 (SUSE-SU-2026:2793-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2793-1 advisory. This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in BitmapScaleBitmaps can lead to a heap buffer overflo...

OPENSUSE-SU-2026:11233-1 libXfont2-2-2.0.7-2.1 on GA media

These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : libXfont2 -- Multiple vulnerabilities (9a1fdf39-7b10-11f1-a315-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9a1fdf39-7b10-11f1-a315-589cfc10a551 advisory. X.Org project reports: Multiple issues have been found in the libXfont2 library published by...