Red Hat Product Errata RHSA-2026:51059 - Security Advisory
Issued:
2026-08-06
Updated:
2026-08-06

RHSA-2026:51059 - Security Advisory

Synopsis

Important: libXfont2 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libXfont2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

X.Org X11 libXfont2 runtime library

Security Fix(es):

  • libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
  • libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)
  • libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

  • BZ - 2496640 - CVE-2026-56001 libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
  • BZ - 2496641 - CVE-2026-56002 libXfont2: PCF Font Parsing Heap Buffer Overflow
  • BZ - 2496642 - CVE-2026-56003 libXfont2: computeProps Property Buffer Heap Buffer Overflow

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
x86_64
libXfont2-2.0.3-12.el9_6.1.i686.rpm SHA-256: 6aaafea04669c40faee6a2d7f24bb62b67513a1abfb73892cf7e55cd82bdac32
libXfont2-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 008065de4a14d97d353bcd6a868c01a10e5ed64dd8134fc1657aa10e330f60aa
libXfont2-debuginfo-2.0.3-12.el9_6.1.i686.rpm SHA-256: e58642e8dab28efc0d0452d2a86829f39e0b3737d7dbd72fe840d11b0028b4c0
libXfont2-debuginfo-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 1a96f392d627bcb29b33517186c06f59d1000b278572d35345b5c262ddcbe187
libXfont2-debugsource-2.0.3-12.el9_6.1.i686.rpm SHA-256: 5e89fe015321a5c133e843909643a58c516a501aed95ab557790bd74fbd6e577
libXfont2-debugsource-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 40c6c1c89a13eb3113b294c7b5d22538d995105dc6376b17ceb093d1727ca9d8

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
x86_64
libXfont2-2.0.3-12.el9_6.1.i686.rpm SHA-256: 6aaafea04669c40faee6a2d7f24bb62b67513a1abfb73892cf7e55cd82bdac32
libXfont2-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 008065de4a14d97d353bcd6a868c01a10e5ed64dd8134fc1657aa10e330f60aa
libXfont2-debuginfo-2.0.3-12.el9_6.1.i686.rpm SHA-256: e58642e8dab28efc0d0452d2a86829f39e0b3737d7dbd72fe840d11b0028b4c0
libXfont2-debuginfo-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 1a96f392d627bcb29b33517186c06f59d1000b278572d35345b5c262ddcbe187
libXfont2-debugsource-2.0.3-12.el9_6.1.i686.rpm SHA-256: 5e89fe015321a5c133e843909643a58c516a501aed95ab557790bd74fbd6e577
libXfont2-debugsource-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 40c6c1c89a13eb3113b294c7b5d22538d995105dc6376b17ceb093d1727ca9d8

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
s390x
libXfont2-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 6f47ab2e89cfe10be4bfa237688c7d28cf93eaec9e7e6f2f171f6526e3d6233b
libXfont2-debuginfo-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 3dd77454dc42910efb9ec1df6203137fecf7974d128c19166668ae245a1258eb
libXfont2-debugsource-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 4faf9a0d9a08262bf1efe6df043d1e1f8ac56dca197ee974fd097b8d5ed85772

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
ppc64le
libXfont2-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: 240ef7f560dcaa5e067c95c69242239ad0ab49f5e54f8aaee865729386e06028
libXfont2-debuginfo-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: bd2150bea9aa9b31d7e417aeb7df7f336660ec5640d8ec2d7ee0d17133e4affe
libXfont2-debugsource-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: a64cd56763f0b1989f7e44cdae3278f151674e05dd6e6daeec8ae409b9d98eaa

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
aarch64
libXfont2-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: 0aec95f3d88e5b184673373f99dc1bec425f80bb4bbdcb613c992d6adef7053f
libXfont2-debuginfo-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: 4bfbc9654a5eb7ff01047d284c58eac1c6a8df80eab19b81b8ab04cdb85f23ec
libXfont2-debugsource-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: ac6875b74e7f3f76ba1e79ceaa156deb1402d426589a39405bddddce78d4af82

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
ppc64le
libXfont2-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: 240ef7f560dcaa5e067c95c69242239ad0ab49f5e54f8aaee865729386e06028
libXfont2-debuginfo-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: bd2150bea9aa9b31d7e417aeb7df7f336660ec5640d8ec2d7ee0d17133e4affe
libXfont2-debugsource-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: a64cd56763f0b1989f7e44cdae3278f151674e05dd6e6daeec8ae409b9d98eaa

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
x86_64
libXfont2-2.0.3-12.el9_6.1.i686.rpm SHA-256: 6aaafea04669c40faee6a2d7f24bb62b67513a1abfb73892cf7e55cd82bdac32
libXfont2-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 008065de4a14d97d353bcd6a868c01a10e5ed64dd8134fc1657aa10e330f60aa
libXfont2-debuginfo-2.0.3-12.el9_6.1.i686.rpm SHA-256: e58642e8dab28efc0d0452d2a86829f39e0b3737d7dbd72fe840d11b0028b4c0
libXfont2-debuginfo-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 1a96f392d627bcb29b33517186c06f59d1000b278572d35345b5c262ddcbe187
libXfont2-debugsource-2.0.3-12.el9_6.1.i686.rpm SHA-256: 5e89fe015321a5c133e843909643a58c516a501aed95ab557790bd74fbd6e577
libXfont2-debugsource-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 40c6c1c89a13eb3113b294c7b5d22538d995105dc6376b17ceb093d1727ca9d8

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6

SRPM
x86_64
libXfont2-debuginfo-2.0.3-12.el9_6.1.i686.rpm SHA-256: e58642e8dab28efc0d0452d2a86829f39e0b3737d7dbd72fe840d11b0028b4c0
libXfont2-debuginfo-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 1a96f392d627bcb29b33517186c06f59d1000b278572d35345b5c262ddcbe187
libXfont2-debugsource-2.0.3-12.el9_6.1.i686.rpm SHA-256: 5e89fe015321a5c133e843909643a58c516a501aed95ab557790bd74fbd6e577
libXfont2-debugsource-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 40c6c1c89a13eb3113b294c7b5d22538d995105dc6376b17ceb093d1727ca9d8
libXfont2-devel-2.0.3-12.el9_6.1.i686.rpm SHA-256: 215dbba26e6ee939fa8224488e88d9fb790e70fef9d974643a38559aff0982dc
libXfont2-devel-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 89d06a017b5aed01e38cfbbd804eb2c389c18e1799cea6895f5cef11667beffa

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6

SRPM
ppc64le
libXfont2-debuginfo-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: bd2150bea9aa9b31d7e417aeb7df7f336660ec5640d8ec2d7ee0d17133e4affe
libXfont2-debugsource-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: a64cd56763f0b1989f7e44cdae3278f151674e05dd6e6daeec8ae409b9d98eaa
libXfont2-devel-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: 23d3470a83d1edf3db2f54662d4b7245d5bf18db08bf7a27c87b9b32e192d73c

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6

SRPM
s390x
libXfont2-debuginfo-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 3dd77454dc42910efb9ec1df6203137fecf7974d128c19166668ae245a1258eb
libXfont2-debugsource-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 4faf9a0d9a08262bf1efe6df043d1e1f8ac56dca197ee974fd097b8d5ed85772
libXfont2-devel-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 571a5d8e3d354f382ae5fda707981e2c3d13b88b66d291ff601e6eebd8116141

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6

SRPM
aarch64
libXfont2-debuginfo-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: 4bfbc9654a5eb7ff01047d284c58eac1c6a8df80eab19b81b8ab04cdb85f23ec
libXfont2-debugsource-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: ac6875b74e7f3f76ba1e79ceaa156deb1402d426589a39405bddddce78d4af82
libXfont2-devel-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: 422318ebb2d7584adb1bd4274b24c5b0ea188f3b3ccb00ca686011afc7d524cf

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
aarch64
libXfont2-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: 0aec95f3d88e5b184673373f99dc1bec425f80bb4bbdcb613c992d6adef7053f
libXfont2-debuginfo-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: 4bfbc9654a5eb7ff01047d284c58eac1c6a8df80eab19b81b8ab04cdb85f23ec
libXfont2-debugsource-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: ac6875b74e7f3f76ba1e79ceaa156deb1402d426589a39405bddddce78d4af82

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
s390x
libXfont2-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 6f47ab2e89cfe10be4bfa237688c7d28cf93eaec9e7e6f2f171f6526e3d6233b
libXfont2-debuginfo-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 3dd77454dc42910efb9ec1df6203137fecf7974d128c19166668ae245a1258eb
libXfont2-debugsource-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 4faf9a0d9a08262bf1efe6df043d1e1f8ac56dca197ee974fd097b8d5ed85772

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
x86_64
libXfont2-2.0.3-12.el9_6.1.i686.rpm SHA-256: 6aaafea04669c40faee6a2d7f24bb62b67513a1abfb73892cf7e55cd82bdac32
libXfont2-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 008065de4a14d97d353bcd6a868c01a10e5ed64dd8134fc1657aa10e330f60aa
libXfont2-debuginfo-2.0.3-12.el9_6.1.i686.rpm SHA-256: e58642e8dab28efc0d0452d2a86829f39e0b3737d7dbd72fe840d11b0028b4c0
libXfont2-debuginfo-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 1a96f392d627bcb29b33517186c06f59d1000b278572d35345b5c262ddcbe187
libXfont2-debugsource-2.0.3-12.el9_6.1.i686.rpm SHA-256: 5e89fe015321a5c133e843909643a58c516a501aed95ab557790bd74fbd6e577
libXfont2-debugsource-2.0.3-12.el9_6.1.x86_64.rpm SHA-256: 40c6c1c89a13eb3113b294c7b5d22538d995105dc6376b17ceb093d1727ca9d8

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
aarch64
libXfont2-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: 0aec95f3d88e5b184673373f99dc1bec425f80bb4bbdcb613c992d6adef7053f
libXfont2-debuginfo-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: 4bfbc9654a5eb7ff01047d284c58eac1c6a8df80eab19b81b8ab04cdb85f23ec
libXfont2-debugsource-2.0.3-12.el9_6.1.aarch64.rpm SHA-256: ac6875b74e7f3f76ba1e79ceaa156deb1402d426589a39405bddddce78d4af82

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
ppc64le
libXfont2-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: 240ef7f560dcaa5e067c95c69242239ad0ab49f5e54f8aaee865729386e06028
libXfont2-debuginfo-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: bd2150bea9aa9b31d7e417aeb7df7f336660ec5640d8ec2d7ee0d17133e4affe
libXfont2-debugsource-2.0.3-12.el9_6.1.ppc64le.rpm SHA-256: a64cd56763f0b1989f7e44cdae3278f151674e05dd6e6daeec8ae409b9d98eaa

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
libXfont2-2.0.3-12.el9_6.1.src.rpm SHA-256: dc4c723a80c126dda8e49d606602d7d8352f832086a82649bbdc6478d56591fc
s390x
libXfont2-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 6f47ab2e89cfe10be4bfa237688c7d28cf93eaec9e7e6f2f171f6526e3d6233b
libXfont2-debuginfo-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 3dd77454dc42910efb9ec1df6203137fecf7974d128c19166668ae245a1258eb
libXfont2-debugsource-2.0.3-12.el9_6.1.s390x.rpm SHA-256: 4faf9a0d9a08262bf1efe6df043d1e1f8ac56dca197ee974fd097b8d5ed85772

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.