RHSA-2026:47079: Important: libXfont2 security update

Published Jul 28, 2026

Updated

X.Org X11 libXfont2 runtime librarySecurity Fix(es): libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001) libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

X.Org libXfont2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade libXfont2 to a version that resolves this vulnerability.
Patch CVE-2026-56002
Upgrade
Upgrade libXfont2 to a version that resolves this vulnerability.
Patch CVE-2026-56001

Event History

Jul 28, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2026:47079?

The severity of RHSA-2026:47079 is rated as important.

What vulnerabilities are addressed in RHSA-2026:47079?

RHSA-2026:47079 addresses two vulnerabilities: CVE-2026-56001 and CVE-2026-56002.

How do I fix RHSA-2026:47079?

To fix RHSA-2026:47079, update the libXfont2 package to the latest version provided by your distribution.

What are the consequences of not addressing RHSA-2026:47079?

Not addressing RHSA-2026:47079 may leave systems vulnerable to heap buffer overflows and integer overflow exploits.

Which library is affected by RHSA-2026:47079?

The X.Org libXfont2 runtime library is affected by RHSA-2026:47079.