Red Hat Product Errata RHSA-2026:55446 - Security Advisory
Issued:
2026-08-17
Updated:
2026-08-17

RHSA-2026:55446 - Security Advisory

Synopsis

Important: libXfont2 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libXfont2 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

X.Org X11 libXfont2 runtime library

Security Fix(es):

  • libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
  • libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2509620 - CVE-2026-59679 libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write
  • BZ - 2509622 - CVE-2026-44950 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

Red Hat Enterprise Linux for x86_64 8

SRPM
libXfont2-2.0.3-2.el8_10.3.src.rpm SHA-256: ddd22de67c0d0885eed8f6b88c35a4029def0c15c2350ec9a16eae073c2090d3
x86_64
libXfont2-2.0.3-2.el8_10.3.i686.rpm SHA-256: 32075abb24ac9e720940fc34cafb31a05b8a16bec32901d1f622ed0cbc145302
libXfont2-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: 3ef9e1e5bb805160c8549aa3eeac9803915d066d2ba774e2afdd19d1ab0c9ec3
libXfont2-debuginfo-2.0.3-2.el8_10.3.i686.rpm SHA-256: 2a5d7df081956c8ab5280a246e2c4ce5aa494e897f83499ffaa4e6c4bda07bcc
libXfont2-debuginfo-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: 54c1986c5495a1fec625ac9ffa3a9d559f990ffd54bb5114cbfb2614c42e5c17
libXfont2-debugsource-2.0.3-2.el8_10.3.i686.rpm SHA-256: 338049ad5ee8b430d4651a919d153c00ddf80483edb7ba47f7cbee4fdb15e9fb
libXfont2-debugsource-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: 460ecf9d2ce8b31a63c73450d32e933c181ef9e9066a737f13102658c3f10aa2

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
libXfont2-2.0.3-2.el8_10.3.src.rpm SHA-256: ddd22de67c0d0885eed8f6b88c35a4029def0c15c2350ec9a16eae073c2090d3
s390x
libXfont2-2.0.3-2.el8_10.3.s390x.rpm SHA-256: 7835be5094c5d00cd0180f7192ac4794537cea91a05653db820dca1e4eeaa48b
libXfont2-debuginfo-2.0.3-2.el8_10.3.s390x.rpm SHA-256: dcbb4abb7cc0b88ae10d142bd7a16f3d2ee82f00652d52cc6ff9f6d2b4ba01b5
libXfont2-debugsource-2.0.3-2.el8_10.3.s390x.rpm SHA-256: dc315f990cf0563d6b846ffbc3eaedcf06249e114ea13ceadbfb73e623370d49

Red Hat Enterprise Linux for Power, little endian 8

SRPM
libXfont2-2.0.3-2.el8_10.3.src.rpm SHA-256: ddd22de67c0d0885eed8f6b88c35a4029def0c15c2350ec9a16eae073c2090d3
ppc64le
libXfont2-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: 5bf1e24449f8258a17b8397f5ebab51ec0c429f99ea0eb0fa8ea8becf9507378
libXfont2-debuginfo-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: a7405f3557ecad4f1bbe38592b712076b5d2d9874310058d81fffbe8c8adad12
libXfont2-debugsource-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: 765108b856409730aca8d6dde94baec68bcf93f38dfa9563f42ac8608d7faa40

Red Hat Enterprise Linux for ARM 64 8

SRPM
libXfont2-2.0.3-2.el8_10.3.src.rpm SHA-256: ddd22de67c0d0885eed8f6b88c35a4029def0c15c2350ec9a16eae073c2090d3
aarch64
libXfont2-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: 7d13e0264308e995750d65f7b262aee84e0d5828a9c62d3ac6c5b3804077160f
libXfont2-debuginfo-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: 35caec3d72c7952137d3545e6f0b29b0649953e9932d80363b015f8fc7ca5758
libXfont2-debugsource-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: 73efb44510a3618bfebb57bd9a14c8cef828960ca25ef682b83588fc7c6ded37

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
libXfont2-debuginfo-2.0.3-2.el8_10.3.i686.rpm SHA-256: 2a5d7df081956c8ab5280a246e2c4ce5aa494e897f83499ffaa4e6c4bda07bcc
libXfont2-debuginfo-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: 54c1986c5495a1fec625ac9ffa3a9d559f990ffd54bb5114cbfb2614c42e5c17
libXfont2-debugsource-2.0.3-2.el8_10.3.i686.rpm SHA-256: 338049ad5ee8b430d4651a919d153c00ddf80483edb7ba47f7cbee4fdb15e9fb
libXfont2-debugsource-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: 460ecf9d2ce8b31a63c73450d32e933c181ef9e9066a737f13102658c3f10aa2
libXfont2-devel-2.0.3-2.el8_10.3.i686.rpm SHA-256: 0ed341f57504299ad4a7fa1e5de55d10ba2b616d609e3b2168470480b7658ec4
libXfont2-devel-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: d147f4a3aed9c2a88cbcf0494f764810abe22dc77c10d58d7fbf5e7c7f086307

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
libXfont2-debuginfo-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: a7405f3557ecad4f1bbe38592b712076b5d2d9874310058d81fffbe8c8adad12
libXfont2-debugsource-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: 765108b856409730aca8d6dde94baec68bcf93f38dfa9563f42ac8608d7faa40
libXfont2-devel-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: 4ab5fc035da9282cbf72531f3bf4ae80a38dc46730689429fa9b5516bd9db4b9

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
libXfont2-debuginfo-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: 35caec3d72c7952137d3545e6f0b29b0649953e9932d80363b015f8fc7ca5758
libXfont2-debugsource-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: 73efb44510a3618bfebb57bd9a14c8cef828960ca25ef682b83588fc7c6ded37
libXfont2-devel-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: b6534c014f0715b9a7776e1c837747ded813fe977029e2224bf28905ba75f5df

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
libXfont2-debuginfo-2.0.3-2.el8_10.3.s390x.rpm SHA-256: dcbb4abb7cc0b88ae10d142bd7a16f3d2ee82f00652d52cc6ff9f6d2b4ba01b5
libXfont2-debugsource-2.0.3-2.el8_10.3.s390x.rpm SHA-256: dc315f990cf0563d6b846ffbc3eaedcf06249e114ea13ceadbfb73e623370d49
libXfont2-devel-2.0.3-2.el8_10.3.s390x.rpm SHA-256: 5d6341bd768baee3249d6cd54f8464e28ec765decfa5452f99105e4da07ba6a7

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
libXfont2-2.0.3-2.el8_10.3.src.rpm SHA-256: ddd22de67c0d0885eed8f6b88c35a4029def0c15c2350ec9a16eae073c2090d3
x86_64
libXfont2-2.0.3-2.el8_10.3.i686.rpm SHA-256: 32075abb24ac9e720940fc34cafb31a05b8a16bec32901d1f622ed0cbc145302
libXfont2-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: 3ef9e1e5bb805160c8549aa3eeac9803915d066d2ba774e2afdd19d1ab0c9ec3
libXfont2-debuginfo-2.0.3-2.el8_10.3.i686.rpm SHA-256: 2a5d7df081956c8ab5280a246e2c4ce5aa494e897f83499ffaa4e6c4bda07bcc
libXfont2-debuginfo-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: 54c1986c5495a1fec625ac9ffa3a9d559f990ffd54bb5114cbfb2614c42e5c17
libXfont2-debugsource-2.0.3-2.el8_10.3.i686.rpm SHA-256: 338049ad5ee8b430d4651a919d153c00ddf80483edb7ba47f7cbee4fdb15e9fb
libXfont2-debugsource-2.0.3-2.el8_10.3.x86_64.rpm SHA-256: 460ecf9d2ce8b31a63c73450d32e933c181ef9e9066a737f13102658c3f10aa2

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
libXfont2-2.0.3-2.el8_10.3.src.rpm SHA-256: ddd22de67c0d0885eed8f6b88c35a4029def0c15c2350ec9a16eae073c2090d3
aarch64
libXfont2-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: 7d13e0264308e995750d65f7b262aee84e0d5828a9c62d3ac6c5b3804077160f
libXfont2-debuginfo-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: 35caec3d72c7952137d3545e6f0b29b0649953e9932d80363b015f8fc7ca5758
libXfont2-debugsource-2.0.3-2.el8_10.3.aarch64.rpm SHA-256: 73efb44510a3618bfebb57bd9a14c8cef828960ca25ef682b83588fc7c6ded37

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
libXfont2-2.0.3-2.el8_10.3.src.rpm SHA-256: ddd22de67c0d0885eed8f6b88c35a4029def0c15c2350ec9a16eae073c2090d3
ppc64le
libXfont2-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: 5bf1e24449f8258a17b8397f5ebab51ec0c429f99ea0eb0fa8ea8becf9507378
libXfont2-debuginfo-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: a7405f3557ecad4f1bbe38592b712076b5d2d9874310058d81fffbe8c8adad12
libXfont2-debugsource-2.0.3-2.el8_10.3.ppc64le.rpm SHA-256: 765108b856409730aca8d6dde94baec68bcf93f38dfa9563f42ac8608d7faa40

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
libXfont2-2.0.3-2.el8_10.3.src.rpm SHA-256: ddd22de67c0d0885eed8f6b88c35a4029def0c15c2350ec9a16eae073c2090d3
s390x
libXfont2-2.0.3-2.el8_10.3.s390x.rpm SHA-256: 7835be5094c5d00cd0180f7192ac4794537cea91a05653db820dca1e4eeaa48b
libXfont2-debuginfo-2.0.3-2.el8_10.3.s390x.rpm SHA-256: dcbb4abb7cc0b88ae10d142bd7a16f3d2ee82f00652d52cc6ff9f6d2b4ba01b5
libXfont2-debugsource-2.0.3-2.el8_10.3.s390x.rpm SHA-256: dc315f990cf0563d6b846ffbc3eaedcf06249e114ea13ceadbfb73e623370d49

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.