High ELSA-2026-55447 2 CVEs

Important: libXfont2 security update (Oracle Linux 9)

Published Aug 17, 2026 · Updated Aug 17, 2026

Ecosystem: Oracle Linux

Summary

[2.0.3-12.3]
- CVE fix for: CVE-2026-59679
Resolves: https://redhat.atlassian.net/browse/RHEL-221957

[2.0.3-12.2]
- CVE fix for: CVE-2026-44950
Resolves: https://redhat.atlassian.net/browse/RHEL-222029

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	libXfont2	0:2.0.3-12.el9_8.3
Oracle Linux · 9	libXfont2-devel	0:2.0.3-12.el9_8.3

Vulnerabilities 2

Critical 9.0

CVE-2026-44950

fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the…

SUSE Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP7-SAP-GCE Image SLES-SAP-GCE-3P Debian Ubuntu Azure Linux

Sep 10, 2026
Critical 9.0

CVE-2026-59679

fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the separate FS_QueryXExt…

SUSE Image SLES15-SP6-SAP-Azure-3P Image SLES15-SP6-SAPCAL-Azure Image SLES15-SP7-SAPCAL-Azure Debian Ubuntu Azure Linux

Sep 10, 2026