Red Hat Product Errata RHSA-2026:61390 - Security Advisory
Issued:
2026-08-31
Updated:
2026-08-31

RHSA-2026:61390 - Security Advisory

Synopsis

Important: libXfont2 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libXfont2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

X.Org X11 libXfont2 runtime library

Security Fix(es):

  • libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
  • libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

  • BZ - 2509620 - CVE-2026-59679 libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write
  • BZ - 2509622 - CVE-2026-44950 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
x86_64
libXfont2-2.0.3-12.el9_6.3.i686.rpm SHA-256: 4be716c485d1401f31c17b6701b6b59958c3e687c0f64267ddaa07b0ba2d98d5
libXfont2-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: a888516f139c8af2df151583654b0b534aaa83708bfec31479baf2f0376bddc9
libXfont2-debuginfo-2.0.3-12.el9_6.3.i686.rpm SHA-256: 762bdfa427ddda9478da55521f2daa6cc2eeb4f90bdddfce002c34cf19b61843
libXfont2-debuginfo-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 02de37c7264a726b98d31f4764d4220fbf786a28fa366b0dbbb81c3f45971ac1
libXfont2-debugsource-2.0.3-12.el9_6.3.i686.rpm SHA-256: efd32ed73efb54aa5097e8d289195d00524e09f5bd2ae3ef4073590af95d2835
libXfont2-debugsource-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 23a5652a36f3d39d61f2b82014e476e957c20097520ada699c6f03a8356b452f

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
x86_64
libXfont2-2.0.3-12.el9_6.3.i686.rpm SHA-256: 4be716c485d1401f31c17b6701b6b59958c3e687c0f64267ddaa07b0ba2d98d5
libXfont2-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: a888516f139c8af2df151583654b0b534aaa83708bfec31479baf2f0376bddc9
libXfont2-debuginfo-2.0.3-12.el9_6.3.i686.rpm SHA-256: 762bdfa427ddda9478da55521f2daa6cc2eeb4f90bdddfce002c34cf19b61843
libXfont2-debuginfo-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 02de37c7264a726b98d31f4764d4220fbf786a28fa366b0dbbb81c3f45971ac1
libXfont2-debugsource-2.0.3-12.el9_6.3.i686.rpm SHA-256: efd32ed73efb54aa5097e8d289195d00524e09f5bd2ae3ef4073590af95d2835
libXfont2-debugsource-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 23a5652a36f3d39d61f2b82014e476e957c20097520ada699c6f03a8356b452f

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
s390x
libXfont2-2.0.3-12.el9_6.3.s390x.rpm SHA-256: dfc7cb22747a669c7368794fc5e1738d80de41b4392b104ef706195b3510ee9d
libXfont2-debuginfo-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 1d2e58b4f7f25a3ecf8b8e7e6f83df0273acf861269adb0fb5a048b19a0781e4
libXfont2-debugsource-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 788f5eccc1da28e51b8475f687bb4ff610d8d07dbd2c90a2ebb84e74056541f2

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
ppc64le
libXfont2-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: 260e3a2f58b45cdd5aaf7fae8f29936bd074db0adda884955cd65c5c98a2613c
libXfont2-debuginfo-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: 7bed2909063d5744f2a1a77d26f19a24abc60f120f510b1b0b053ffb66af42ee
libXfont2-debugsource-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: ebe4e900588ed14f070a26265060b90bb935a462b6fbcc752312baac04b1eec1

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
aarch64
libXfont2-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: 04e198109ec8d89aa52c41e7aa24e22057ada0386c19a3d3740a3d71c8291a40
libXfont2-debuginfo-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: e8d9c37f613a6b78202e1960d0b7efcf1532e0459efc99e97986122165840801
libXfont2-debugsource-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: 8ea689d0c8ee639689a6187d61f5910a610fdaded3c311827972afc6d024dfc0

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
ppc64le
libXfont2-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: 260e3a2f58b45cdd5aaf7fae8f29936bd074db0adda884955cd65c5c98a2613c
libXfont2-debuginfo-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: 7bed2909063d5744f2a1a77d26f19a24abc60f120f510b1b0b053ffb66af42ee
libXfont2-debugsource-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: ebe4e900588ed14f070a26265060b90bb935a462b6fbcc752312baac04b1eec1

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
x86_64
libXfont2-2.0.3-12.el9_6.3.i686.rpm SHA-256: 4be716c485d1401f31c17b6701b6b59958c3e687c0f64267ddaa07b0ba2d98d5
libXfont2-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: a888516f139c8af2df151583654b0b534aaa83708bfec31479baf2f0376bddc9
libXfont2-debuginfo-2.0.3-12.el9_6.3.i686.rpm SHA-256: 762bdfa427ddda9478da55521f2daa6cc2eeb4f90bdddfce002c34cf19b61843
libXfont2-debuginfo-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 02de37c7264a726b98d31f4764d4220fbf786a28fa366b0dbbb81c3f45971ac1
libXfont2-debugsource-2.0.3-12.el9_6.3.i686.rpm SHA-256: efd32ed73efb54aa5097e8d289195d00524e09f5bd2ae3ef4073590af95d2835
libXfont2-debugsource-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 23a5652a36f3d39d61f2b82014e476e957c20097520ada699c6f03a8356b452f

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6

SRPM
x86_64
libXfont2-debuginfo-2.0.3-12.el9_6.3.i686.rpm SHA-256: 762bdfa427ddda9478da55521f2daa6cc2eeb4f90bdddfce002c34cf19b61843
libXfont2-debuginfo-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 02de37c7264a726b98d31f4764d4220fbf786a28fa366b0dbbb81c3f45971ac1
libXfont2-debugsource-2.0.3-12.el9_6.3.i686.rpm SHA-256: efd32ed73efb54aa5097e8d289195d00524e09f5bd2ae3ef4073590af95d2835
libXfont2-debugsource-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 23a5652a36f3d39d61f2b82014e476e957c20097520ada699c6f03a8356b452f
libXfont2-devel-2.0.3-12.el9_6.3.i686.rpm SHA-256: e3b9b0c7ff32634da9c16ecee2db8ab7d0d0d0db763b6b115c2bb1a47de2121a
libXfont2-devel-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 78f76e32856e57dced1b366ac8eaddff1730da4fefa55622385474d19e61a3e6

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6

SRPM
ppc64le
libXfont2-debuginfo-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: 7bed2909063d5744f2a1a77d26f19a24abc60f120f510b1b0b053ffb66af42ee
libXfont2-debugsource-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: ebe4e900588ed14f070a26265060b90bb935a462b6fbcc752312baac04b1eec1
libXfont2-devel-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: 0f012253721e33a393103a7ae8de0d222fd9910f60fed0f1920eccffabec435a

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6

SRPM
s390x
libXfont2-debuginfo-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 1d2e58b4f7f25a3ecf8b8e7e6f83df0273acf861269adb0fb5a048b19a0781e4
libXfont2-debugsource-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 788f5eccc1da28e51b8475f687bb4ff610d8d07dbd2c90a2ebb84e74056541f2
libXfont2-devel-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 653f39a637094d4867ce29dfd0fdf6e7ad7ad5a075b3c1e3cc77d2ca178c05eb

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6

SRPM
aarch64
libXfont2-debuginfo-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: e8d9c37f613a6b78202e1960d0b7efcf1532e0459efc99e97986122165840801
libXfont2-debugsource-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: 8ea689d0c8ee639689a6187d61f5910a610fdaded3c311827972afc6d024dfc0
libXfont2-devel-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: 4f3c79de49b27bfca44053e0d1a429529f0621db8b9f9f3042086f87a0d91d56

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
aarch64
libXfont2-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: 04e198109ec8d89aa52c41e7aa24e22057ada0386c19a3d3740a3d71c8291a40
libXfont2-debuginfo-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: e8d9c37f613a6b78202e1960d0b7efcf1532e0459efc99e97986122165840801
libXfont2-debugsource-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: 8ea689d0c8ee639689a6187d61f5910a610fdaded3c311827972afc6d024dfc0

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
s390x
libXfont2-2.0.3-12.el9_6.3.s390x.rpm SHA-256: dfc7cb22747a669c7368794fc5e1738d80de41b4392b104ef706195b3510ee9d
libXfont2-debuginfo-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 1d2e58b4f7f25a3ecf8b8e7e6f83df0273acf861269adb0fb5a048b19a0781e4
libXfont2-debugsource-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 788f5eccc1da28e51b8475f687bb4ff610d8d07dbd2c90a2ebb84e74056541f2

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
x86_64
libXfont2-2.0.3-12.el9_6.3.i686.rpm SHA-256: 4be716c485d1401f31c17b6701b6b59958c3e687c0f64267ddaa07b0ba2d98d5
libXfont2-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: a888516f139c8af2df151583654b0b534aaa83708bfec31479baf2f0376bddc9
libXfont2-debuginfo-2.0.3-12.el9_6.3.i686.rpm SHA-256: 762bdfa427ddda9478da55521f2daa6cc2eeb4f90bdddfce002c34cf19b61843
libXfont2-debuginfo-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 02de37c7264a726b98d31f4764d4220fbf786a28fa366b0dbbb81c3f45971ac1
libXfont2-debugsource-2.0.3-12.el9_6.3.i686.rpm SHA-256: efd32ed73efb54aa5097e8d289195d00524e09f5bd2ae3ef4073590af95d2835
libXfont2-debugsource-2.0.3-12.el9_6.3.x86_64.rpm SHA-256: 23a5652a36f3d39d61f2b82014e476e957c20097520ada699c6f03a8356b452f

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
aarch64
libXfont2-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: 04e198109ec8d89aa52c41e7aa24e22057ada0386c19a3d3740a3d71c8291a40
libXfont2-debuginfo-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: e8d9c37f613a6b78202e1960d0b7efcf1532e0459efc99e97986122165840801
libXfont2-debugsource-2.0.3-12.el9_6.3.aarch64.rpm SHA-256: 8ea689d0c8ee639689a6187d61f5910a610fdaded3c311827972afc6d024dfc0

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
ppc64le
libXfont2-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: 260e3a2f58b45cdd5aaf7fae8f29936bd074db0adda884955cd65c5c98a2613c
libXfont2-debuginfo-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: 7bed2909063d5744f2a1a77d26f19a24abc60f120f510b1b0b053ffb66af42ee
libXfont2-debugsource-2.0.3-12.el9_6.3.ppc64le.rpm SHA-256: ebe4e900588ed14f070a26265060b90bb935a462b6fbcc752312baac04b1eec1

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
libXfont2-2.0.3-12.el9_6.3.src.rpm SHA-256: f176be4dc80dbf7e5cf57796f9ec0a026ad9eb79a850c09f249fabb5667802ce
s390x
libXfont2-2.0.3-12.el9_6.3.s390x.rpm SHA-256: dfc7cb22747a669c7368794fc5e1738d80de41b4392b104ef706195b3510ee9d
libXfont2-debuginfo-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 1d2e58b4f7f25a3ecf8b8e7e6f83df0273acf861269adb0fb5a048b19a0781e4
libXfont2-debugsource-2.0.3-12.el9_6.3.s390x.rpm SHA-256: 788f5eccc1da28e51b8475f687bb4ff610d8d07dbd2c90a2ebb84e74056541f2

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.