[SECURITY] Fedora 43 Update: libXfont2-2.0.8-1.fc43

X.Org X11 libXfont2 runtime library...

Fedora 43 : libXfont2 (2026-18ea3f47f8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-18ea3f47f8 advisory. libXfont2 2.0.8 CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Tenable has extracted the preceding description block directly from the Fedora securi...

[SECURITY] Fedora 44 Update: libXfont2-2.0.8-1.fc44

X.Org X11 libXfont2 runtime library...

Fedora 44 : libXfont2 (2026-43652cd5e8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-43652cd5e8 advisory. libXfont2 2.0.8 CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Tenable has extracted the preceding description block directly from the Fedora securi...

libXfont2 PCF Font Parsing Heap Buffer Overflow

...

libXfont2 computeProps Property Buffer Heap Buffer Overflow

...

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

...

SUSE CVE-2026-56001

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont...

SUSE CVE-2026-56002

A heap bufferflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server...

SUSE CVE-2026-56003

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...

OPENSUSE-SU-2026:11233-1 libXfont2-2-2.0.7-2.1 on GA media

These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES12 Security Update : libXfont2 (SUSE-SU-2026:2793-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2793-1 advisory. This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in BitmapScaleBitmaps can lead to a heap buffer overflo...

FreeBSD : libXfont2 -- Multiple vulnerabilities (9a1fdf39-7b10-11f1-a315-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9a1fdf39-7b10-11f1-a315-589cfc10a551 advisory. X.Org project reports: Multiple issues have been found in the libXfont2 library published by...

Slackware Linux 15.0 / current libXfont2 Multiple Vulnerabilities (SSA:2026-189-01)

The version of libXfont2 installed on the remote host is prior to 2.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-189-01 advisory. New libXfont2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

SUSE SLED15 / SLES15 Security Update : libXfont2 (SUSE-SU-2026:2794-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2794-1 advisory. This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in BitmapScaleBitmaps...

[slackware-security] libXfont2

New libXfont2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libXfont2-2.0.8-i586-1slack15.0.txz: Upgraded. This update fixes security issues: BitmapScaleBitmaps Integer Overflow Heap Buffer...

CVE-2026-56001

A flaw was found in libXfont2. In the BitmapScaleBitmaps function, an integer overflow can occur when calculating the memory needed for font glyphs. This overflow leads to a heap buffer overflow, where a smaller-than-required memory buffer is allocated. A local attacker can exploit this by loadin...

CVE-2026-56002

A flaw was found in libXfont2. A specially crafted PCF Portable Compiled Format font file, when processed by libXfont2, can lead to a buffer overflow. This occurs because the font parsing process does not properly validate the size of a bitmap buffer against the glyph metrics provided in the...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...