Описание
Security update for libXfont2
This update for libXfont2 fixes the following issues
- CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (bsc#1269018).
- CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow (bsc#1269019).
- CVE-2026-56003: computeProps Property Buffer Heap Buffer Overflow (bsc#1269020).
Список пакетов
openSUSE Leap 16.0
libXfont2-2-2.0.7-160000.4.1
libXfont2-devel-2.0.7-160000.4.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1269018
- SUSE Bug 1269019
- SUSE Bug 1269020
- SUSE CVE CVE-2026-56001 page
- SUSE CVE CVE-2026-56002 page
- SUSE CVE CVE-2026-56003 page
Описание
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont
Затронутые продукты
openSUSE Leap 16.0:libXfont2-2-2.0.7-160000.4.1
openSUSE Leap 16.0:libXfont2-devel-2.0.7-160000.4.1
Ссылки
- CVE-2026-56001
- SUSE Bug 1269018
Описание
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
Затронутые продукты
openSUSE Leap 16.0:libXfont2-2-2.0.7-160000.4.1
openSUSE Leap 16.0:libXfont2-devel-2.0.7-160000.4.1
Ссылки
- CVE-2026-56002
- SUSE Bug 1269019
Описание
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
Затронутые продукты
openSUSE Leap 16.0:libXfont2-2-2.0.7-160000.4.1
openSUSE Leap 16.0:libXfont2-devel-2.0.7-160000.4.1
Ссылки
- CVE-2026-56003
- SUSE Bug 1269020