critical Security update for libxfont2

SUSE-SLE-Module-Basesystem-15-SP7-2026-3500

This update for libXfont2 fixes the following issues: - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661). - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#1272660).

• Release Date
  Aug 5 2026
• References
  Bugzilla: 1272660, 1272661
  CVEs: CVE-2026-44950, CVE-2026-59679
• Type
  security
• Severity
  critical

cloud_download Downloads

Basesystem Module 15.7 ppc64le

• Packages
  libXfont2
  X font handling library for server and utilities

  2.0.3-150000.3.6.1 lock src

  libXfont2-2
  X font handling library for server and utilities

  2.0.3-150000.3.6.1 lock rpm

  libXfont2-devel
  Development files for the X font handling library

  2.0.3-150000.3.6.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libXfont2
  X font handling library for server and utilities

  2.0.3-150000.3.6.1 lock src

  libXfont2-2
  X font handling library for server and utilities

  2.0.3-150000.3.6.1 lock rpm

  libXfont2-devel
  Development files for the X font handling library

  2.0.3-150000.3.6.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  libXfont2
  X font handling library for server and utilities

  2.0.3-150000.3.6.1 lock src

  libXfont2-2
  X font handling library for server and utilities

  2.0.3-150000.3.6.1 lock rpm

  libXfont2-devel
  Development files for the X font handling library

  2.0.3-150000.3.6.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  libXfont2
  X font handling library for server and utilities

  2.0.3-150000.3.6.1 lock src

  libXfont2-2
  X font handling library for server and utilities

  2.0.3-150000.3.6.1 lock rpm

  libXfont2-devel
  Development files for the X font handling library

  2.0.3-150000.3.6.1 lock rpm