Amazon Linux 2 : libXfont2, --advisory ALAS2-2026-3814 (ALAS-2026-3814)

The version of libXfont2 installed on the remote host is prior to 2.0.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3814 advisory. BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow...

Amazon Linux 2023 : libXfont2, libXfont2-devel (ALAS2023-2026-1967)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1967 advisory. BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 computeProps Property Buffer Heap Buffer Overflow CVE-2026-56003...

Important: libXfont2

Issue Overview: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 computeProps Property Buffer Heap Buffer Overflow CVE-2026-56003 Affected Packages: libXfont2 Issue Correction: Run dnf update libXfont2 --releasever...

TencentOS Server 4: libXfont2 (TSSA-2026:0616)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0616 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

OESA-2026-3055 libXfont2 security update

libXfont provides the core of the legacy X11 font system, handling the index files fonts.dir, fonts.alias, fonts.scale, the various font file formats, and rasterizing them. contains runtime library. Security Fixes: A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an...

openSUSE 16 Security Update : libXfont2 (openSUSE-SU-2026:21284-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21284-1 advisory. This update for libXfont2 fixes the following issues - CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow bsc1269018. -...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...

Security update for libXfont2 (important)

openSUSE security update: security update for libxfont2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21284-1 Rating: important References: bsc1269018 bsc1269019 bsc1269020 Cross-References: CVE-2026-56001 CVE-2026-56002 CVE-2026-56003 CVSS scores...

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 43 Update: libXfont2-2.0.8-1.fc43

X.Org X11 libXfont2 runtime library...

Fedora 43 : libXfont2 (2026-18ea3f47f8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-18ea3f47f8 advisory. libXfont2 2.0.8 CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Tenable has extracted the preceding description block directly from the Fedora securi...

[SECURITY] Fedora 44 Update: libXfont2-2.0.8-1.fc44

X.Org X11 libXfont2 runtime library...

Fedora 44 : libXfont2 (2026-43652cd5e8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-43652cd5e8 advisory. libXfont2 2.0.8 CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Tenable has extracted the preceding description block directly from the Fedora securi...

libXfont2 PCF Font Parsing Heap Buffer Overflow

...

libXfont2 computeProps Property Buffer Heap Buffer Overflow

...

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

...

SUSE CVE-2026-56001

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont...

SUSE CVE-2026-56002

A heap bufferflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server...