Red Hat Product Errata RHSA-2026:47103 - Security Advisory
Issued:
2026-07-28
Updated:
2026-07-28

RHSA-2026:47103 - Security Advisory

Synopsis

Important: libXfont2 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libXfont2 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

X.Org X11 libXfont2 runtime library

Security Fix(es):

  • libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
  • libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)
  • libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2496640 - CVE-2026-56001 libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
  • BZ - 2496641 - CVE-2026-56002 libXfont2: PCF Font Parsing Heap Buffer Overflow
  • BZ - 2496642 - CVE-2026-56003 libXfont2: computeProps Property Buffer Heap Buffer Overflow

Red Hat Enterprise Linux for x86_64 8

SRPM
libXfont2-2.0.3-2.el8_10.1.src.rpm SHA-256: 19a620a9f48d16517de298c638f85bc9b3e1e490147e6936a32cb1816280b0d9
x86_64
libXfont2-2.0.3-2.el8_10.1.i686.rpm SHA-256: 341b04adc15d04b6134f5ffdc881765ce41b923fa9cfb378c2e7db3db19055e0
libXfont2-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: 020dd743799dab6edee9f3ae92e811b9b6e5c5b76442e4bacfa4af08c6cee8ae
libXfont2-debuginfo-2.0.3-2.el8_10.1.i686.rpm SHA-256: ce56d17e722eb6348921a3122571d62f791c1540fedb851b5126b72eab5cb1d4
libXfont2-debuginfo-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: 9e489977f9c7a5470a8b40ebcab174a280c36f25512ab4dca1f42aa86e230c5a
libXfont2-debugsource-2.0.3-2.el8_10.1.i686.rpm SHA-256: 22d7b24a188c68386860ff997d44c43168c08ac437e0968c5f68bb3d652a69ee
libXfont2-debugsource-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: 042dab61526a101e04cfea27e6cece72f3e6569a5c914af6bc30789553126b8d

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
libXfont2-2.0.3-2.el8_10.1.src.rpm SHA-256: 19a620a9f48d16517de298c638f85bc9b3e1e490147e6936a32cb1816280b0d9
s390x
libXfont2-2.0.3-2.el8_10.1.s390x.rpm SHA-256: 3232f1d7162c17a466b7eb5cde62711b69283771003ff4c46184da4d5888e9e4
libXfont2-debuginfo-2.0.3-2.el8_10.1.s390x.rpm SHA-256: 29c43f3761ee1c63d875cd27559b1876c80fa960a511423a3a51099e04986b00
libXfont2-debugsource-2.0.3-2.el8_10.1.s390x.rpm SHA-256: f378e1652ea33fbb8a40018271a943b5059d5a4657a3057147b1fd065f79349b

Red Hat Enterprise Linux for Power, little endian 8

SRPM
libXfont2-2.0.3-2.el8_10.1.src.rpm SHA-256: 19a620a9f48d16517de298c638f85bc9b3e1e490147e6936a32cb1816280b0d9
ppc64le
libXfont2-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: 797fab8f4e5c2c56709cc4cb113016626dd9aefbacec2aa1b6ad2f541fad4e93
libXfont2-debuginfo-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: b9ea87eaf8caae05f691b8e344820a6cb8909443ab1149b8fc4bbbd3df24b0a0
libXfont2-debugsource-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: 807853434e4351abfcd91696901f713bce1e47d5dd1d42babc262d6d55ee81bd

Red Hat Enterprise Linux for ARM 64 8

SRPM
libXfont2-2.0.3-2.el8_10.1.src.rpm SHA-256: 19a620a9f48d16517de298c638f85bc9b3e1e490147e6936a32cb1816280b0d9
aarch64
libXfont2-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: 841fdb27f642efc5104ad15375329a4e2eaa6ea659e91d3c75e9b2aac09990bf
libXfont2-debuginfo-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: 2a98b2dad7c62c2e91d6e9bd3f90ef1045b383a45547b999c5abf7d44617a320
libXfont2-debugsource-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: 3c1f160683a9d26237319e887586ff01585c77230c7dac50e9bb03e49471baf7

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
libXfont2-debuginfo-2.0.3-2.el8_10.1.i686.rpm SHA-256: ce56d17e722eb6348921a3122571d62f791c1540fedb851b5126b72eab5cb1d4
libXfont2-debuginfo-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: 9e489977f9c7a5470a8b40ebcab174a280c36f25512ab4dca1f42aa86e230c5a
libXfont2-debugsource-2.0.3-2.el8_10.1.i686.rpm SHA-256: 22d7b24a188c68386860ff997d44c43168c08ac437e0968c5f68bb3d652a69ee
libXfont2-debugsource-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: 042dab61526a101e04cfea27e6cece72f3e6569a5c914af6bc30789553126b8d
libXfont2-devel-2.0.3-2.el8_10.1.i686.rpm SHA-256: 37d3ed4ef4b6e91ec18327e3370ba0c3d7a583830624d3bdabf55654cbdd5329
libXfont2-devel-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: b07b83ecf6620748bc3a821cd73b4d4fc65a7e95c254adea2efe4ffd91a1fb2b

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
libXfont2-debuginfo-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: b9ea87eaf8caae05f691b8e344820a6cb8909443ab1149b8fc4bbbd3df24b0a0
libXfont2-debugsource-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: 807853434e4351abfcd91696901f713bce1e47d5dd1d42babc262d6d55ee81bd
libXfont2-devel-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: 0187185399d97d05892af8be98d879a14de28fa724ab3c88dbda3151c53a3895

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
libXfont2-debuginfo-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: 2a98b2dad7c62c2e91d6e9bd3f90ef1045b383a45547b999c5abf7d44617a320
libXfont2-debugsource-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: 3c1f160683a9d26237319e887586ff01585c77230c7dac50e9bb03e49471baf7
libXfont2-devel-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: c5953dbf47d420d989f281c695f536a568e09e422810bc1a6dee7bcf7988d198

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
libXfont2-debuginfo-2.0.3-2.el8_10.1.s390x.rpm SHA-256: 29c43f3761ee1c63d875cd27559b1876c80fa960a511423a3a51099e04986b00
libXfont2-debugsource-2.0.3-2.el8_10.1.s390x.rpm SHA-256: f378e1652ea33fbb8a40018271a943b5059d5a4657a3057147b1fd065f79349b
libXfont2-devel-2.0.3-2.el8_10.1.s390x.rpm SHA-256: 1d4c66e857c3013f8962b903c6dc80af0b119a80c37d57fe493f9bc7e991bdbe

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
libXfont2-2.0.3-2.el8_10.1.src.rpm SHA-256: 19a620a9f48d16517de298c638f85bc9b3e1e490147e6936a32cb1816280b0d9
x86_64
libXfont2-2.0.3-2.el8_10.1.i686.rpm SHA-256: 341b04adc15d04b6134f5ffdc881765ce41b923fa9cfb378c2e7db3db19055e0
libXfont2-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: 020dd743799dab6edee9f3ae92e811b9b6e5c5b76442e4bacfa4af08c6cee8ae
libXfont2-debuginfo-2.0.3-2.el8_10.1.i686.rpm SHA-256: ce56d17e722eb6348921a3122571d62f791c1540fedb851b5126b72eab5cb1d4
libXfont2-debuginfo-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: 9e489977f9c7a5470a8b40ebcab174a280c36f25512ab4dca1f42aa86e230c5a
libXfont2-debugsource-2.0.3-2.el8_10.1.i686.rpm SHA-256: 22d7b24a188c68386860ff997d44c43168c08ac437e0968c5f68bb3d652a69ee
libXfont2-debugsource-2.0.3-2.el8_10.1.x86_64.rpm SHA-256: 042dab61526a101e04cfea27e6cece72f3e6569a5c914af6bc30789553126b8d

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
libXfont2-2.0.3-2.el8_10.1.src.rpm SHA-256: 19a620a9f48d16517de298c638f85bc9b3e1e490147e6936a32cb1816280b0d9
aarch64
libXfont2-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: 841fdb27f642efc5104ad15375329a4e2eaa6ea659e91d3c75e9b2aac09990bf
libXfont2-debuginfo-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: 2a98b2dad7c62c2e91d6e9bd3f90ef1045b383a45547b999c5abf7d44617a320
libXfont2-debugsource-2.0.3-2.el8_10.1.aarch64.rpm SHA-256: 3c1f160683a9d26237319e887586ff01585c77230c7dac50e9bb03e49471baf7

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
libXfont2-2.0.3-2.el8_10.1.src.rpm SHA-256: 19a620a9f48d16517de298c638f85bc9b3e1e490147e6936a32cb1816280b0d9
ppc64le
libXfont2-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: 797fab8f4e5c2c56709cc4cb113016626dd9aefbacec2aa1b6ad2f541fad4e93
libXfont2-debuginfo-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: b9ea87eaf8caae05f691b8e344820a6cb8909443ab1149b8fc4bbbd3df24b0a0
libXfont2-debugsource-2.0.3-2.el8_10.1.ppc64le.rpm SHA-256: 807853434e4351abfcd91696901f713bce1e47d5dd1d42babc262d6d55ee81bd

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
libXfont2-2.0.3-2.el8_10.1.src.rpm SHA-256: 19a620a9f48d16517de298c638f85bc9b3e1e490147e6936a32cb1816280b0d9
s390x
libXfont2-2.0.3-2.el8_10.1.s390x.rpm SHA-256: 3232f1d7162c17a466b7eb5cde62711b69283771003ff4c46184da4d5888e9e4
libXfont2-debuginfo-2.0.3-2.el8_10.1.s390x.rpm SHA-256: 29c43f3761ee1c63d875cd27559b1876c80fa960a511423a3a51099e04986b00
libXfont2-debugsource-2.0.3-2.el8_10.1.s390x.rpm SHA-256: f378e1652ea33fbb8a40018271a943b5059d5a4657a3057147b1fd065f79349b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.