Red Hat Product Errata RHSA-2026:62231 - Security Advisory
Issued:
2026-09-01
Updated:
2026-09-01

RHSA-2026:62231 - Security Advisory

Synopsis

Important: libXfont2 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libXfont2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

X.Org X11 libXfont2 runtime library

Security Fix(es):

  • libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
  • libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2509620 - CVE-2026-59679 libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write
  • BZ - 2509622 - CVE-2026-44950 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
libXfont2-2.0.3-3.el7_9.src.rpm SHA-256: 96430434b84ebcf44cf0029edc758c7caae293c8198db2ab2581c9ea2a858097
x86_64
libXfont2-2.0.3-3.el7_9.i686.rpm SHA-256: 36fa3cfa5923b034877702ea62fedcba2607a359a3057065b09558729a791435
libXfont2-2.0.3-3.el7_9.x86_64.rpm SHA-256: a54a1895f015562543a6f8c8f0f47378f2d38e36248612840b56b6e230896095
libXfont2-debuginfo-2.0.3-3.el7_9.i686.rpm SHA-256: 955464a9417d7df3e85ff23271beb87e86fc2212066dbebc5bf5f5df44c1a6e1
libXfont2-debuginfo-2.0.3-3.el7_9.i686.rpm SHA-256: 955464a9417d7df3e85ff23271beb87e86fc2212066dbebc5bf5f5df44c1a6e1
libXfont2-debuginfo-2.0.3-3.el7_9.x86_64.rpm SHA-256: 3602f636cb647040bc3f31645aa604ec27525c55540b6edd604f116dfd08668d
libXfont2-debuginfo-2.0.3-3.el7_9.x86_64.rpm SHA-256: 3602f636cb647040bc3f31645aa604ec27525c55540b6edd604f116dfd08668d
libXfont2-devel-2.0.3-3.el7_9.i686.rpm SHA-256: 8328410e3443f6e842bb8bcdba89e21bb1b15471d0ea6b246f66492cc4be6322
libXfont2-devel-2.0.3-3.el7_9.x86_64.rpm SHA-256: aba044f930db5a3010bd513be869340db1f351c61ea1ea09e4e6507617bf373b

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
libXfont2-2.0.3-3.el7_9.src.rpm SHA-256: 96430434b84ebcf44cf0029edc758c7caae293c8198db2ab2581c9ea2a858097
s390x
libXfont2-2.0.3-3.el7_9.s390.rpm SHA-256: acda55a6cde97c306acfa52d327047a595320ab457b3e280c5d7eba646974418
libXfont2-2.0.3-3.el7_9.s390x.rpm SHA-256: 0553dff4a92021e594eb1647074713f98bd1d399f078ebc54ae3608ccc7c192d
libXfont2-debuginfo-2.0.3-3.el7_9.s390.rpm SHA-256: a78053e5c07e1ed0b0447d09ee2160870459d2821052dd1e756430596fb414bd
libXfont2-debuginfo-2.0.3-3.el7_9.s390.rpm SHA-256: a78053e5c07e1ed0b0447d09ee2160870459d2821052dd1e756430596fb414bd
libXfont2-debuginfo-2.0.3-3.el7_9.s390x.rpm SHA-256: c757f6f53f311231815c515b8054db6a5993e0e5d9b22952e904cde09c6ec2a7
libXfont2-debuginfo-2.0.3-3.el7_9.s390x.rpm SHA-256: c757f6f53f311231815c515b8054db6a5993e0e5d9b22952e904cde09c6ec2a7
libXfont2-devel-2.0.3-3.el7_9.s390.rpm SHA-256: 7a68c1d9e7c2e1d6adbbaf2f60bfb19b5b9a23f01d853a06000d5d36fb0251ad
libXfont2-devel-2.0.3-3.el7_9.s390x.rpm SHA-256: bd59c7487122ed5cafabc268434a6ab912f97fd9e5368b020a513839a39b2ed4

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
libXfont2-2.0.3-3.el7_9.src.rpm SHA-256: 96430434b84ebcf44cf0029edc758c7caae293c8198db2ab2581c9ea2a858097
ppc64
libXfont2-2.0.3-3.el7_9.ppc.rpm SHA-256: 07704ab2152a90113fe521876d975470a0b42dbb52e2b59f7d7db775c58434dc
libXfont2-2.0.3-3.el7_9.ppc64.rpm SHA-256: d77007892c20fcb72dd6a8b5f669a9d09acbdab0f24abb5858c90dbad8d9ae68
libXfont2-debuginfo-2.0.3-3.el7_9.ppc.rpm SHA-256: d1598c71177e10b552dd6f4b5c39d03d8d9cf3b6b3ab3a956c0689c7d54fa1ae
libXfont2-debuginfo-2.0.3-3.el7_9.ppc.rpm SHA-256: d1598c71177e10b552dd6f4b5c39d03d8d9cf3b6b3ab3a956c0689c7d54fa1ae
libXfont2-debuginfo-2.0.3-3.el7_9.ppc64.rpm SHA-256: 2c7a53ef64b741faa76edcbf4b6ca65f8540d6dbd8f7c913f503c05b55c3672f
libXfont2-debuginfo-2.0.3-3.el7_9.ppc64.rpm SHA-256: 2c7a53ef64b741faa76edcbf4b6ca65f8540d6dbd8f7c913f503c05b55c3672f
libXfont2-devel-2.0.3-3.el7_9.ppc.rpm SHA-256: 657de11b80a19d37baa48da79e83453a2640bcbc70c7697422132daaca2d64db
libXfont2-devel-2.0.3-3.el7_9.ppc64.rpm SHA-256: 05a70f1b517c4e94f3adae346668eb9d1f217a41fc1802d370edf66010e3a1c4

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
libXfont2-2.0.3-3.el7_9.src.rpm SHA-256: 96430434b84ebcf44cf0029edc758c7caae293c8198db2ab2581c9ea2a858097
ppc64le
libXfont2-2.0.3-3.el7_9.ppc64le.rpm SHA-256: 6d47b9cb288bb566384d4794bf59c80635acc6f446f1c9fb0a665ec4f55b3b1a
libXfont2-debuginfo-2.0.3-3.el7_9.ppc64le.rpm SHA-256: ae7d31f864e000170de7125c93b87e08ded69c42fbe55ed9bf8b533dc6a5874e
libXfont2-debuginfo-2.0.3-3.el7_9.ppc64le.rpm SHA-256: ae7d31f864e000170de7125c93b87e08ded69c42fbe55ed9bf8b533dc6a5874e
libXfont2-devel-2.0.3-3.el7_9.ppc64le.rpm SHA-256: 130b065461c42b214ebb6a1b4f7924d5bf463a5f9337db414d170f002fc65b50

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.