Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

LibXfont2 Vulnerability on Red Hat Systems: Potential Privilege Escalation

published 2 months ago

Summary

LibXfont2, a font library used by Red Hat systems, has been updated to fix a security issue. This issue could allow an attacker to gain elevated privileges on affected systems. To address this issue, users should update their Red Hat systems to the latest version of libXfont2.

What to do

Update redhat libxfont2 to version 0:2.0.6-5.el10_2.3.
Update redhat libxfont2-debuginfo to version 0:2.0.6-5.el10_2.3.
Update redhat libxfont2-debugsource to version 0:2.0.6-5.el10_2.3.
Update redhat libxfont2-devel to version 0:2.0.6-5.el10_2.3.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:10.2	redhat	libxfont2	< 0:2.0.6-5.el10_2.3 Fix: upgrade to 0:2.0.6-5.el10_2.3
Red Hat:enterprise_linux:10.2	redhat	libxfont2-debuginfo	< 0:2.0.6-5.el10_2.3 Fix: upgrade to 0:2.0.6-5.el10_2.3
Red Hat:enterprise_linux:10.2	redhat	libxfont2-debugsource	< 0:2.0.6-5.el10_2.3 Fix: upgrade to 0:2.0.6-5.el10_2.3
Red Hat:enterprise_linux:10.2	redhat	libxfont2-devel	< 0:2.0.6-5.el10_2.3 Fix: upgrade to 0:2.0.6-5.el10_2.3

Original advisory text

Red Hat Security Advisory: libXfont2 security update

References

https://access.redhat.com/errata/RHSA-2026:55448 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2509620 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2509622 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55448.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-44950 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-44950 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-44950 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-59679 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-59679 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-59679 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published17 Aug 2026

Updated17 Aug 2026

First seen17 Aug 2026

Sources

RHSA-2026:55448 · OSV

Track software like this

Free during beta