rpms/libXfont2
7
0
Fork 0
Code Issues Pull Requests Releases Activity
X.Org X11 libXfont2 runtime library
10 Commits 8 Branches 15 Tags 139 KiB
Diff 100%
401df0f4e3
Go to file
RHEL Packaging Agent 401df0f4e3 Fix CVE-2026-59679: OOB read/write via malicious font server 
Backport upstream commit 668fea81f40bcb48 to fix CVE-2026-59679.
The patch adds num_chars validation against the encoding array
size in fs_read_glyphs() to prevent out-of-bounds access from
a malicious font server reply, along with a regression test.

CVE: CVE-2026-59679
Upstream patches:
 - 668fea81f4.patch
Resolves: RHEL-221952

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-17 07:39:26 +00:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-15 15:21:06 +02:00
0001-bitscale-fix-integer-overflow-in-BitmapScaleBitmaps-.patch CVE fix for: 2026-07-08 11:51:04 +02:00
0002-pcfread-validate-bitmap-sizes-and-offsets-against-pe.patch CVE fix for: 2026-07-08 11:51:04 +02:00
0003-bitscale-add-bounds-check-to-computeProps-for-proper.patch CVE fix for: 2026-07-08 11:51:04 +02:00
0004-fserve-validate-num_chars-against-encoding-array-siz.patch Fix CVE-2026-59679: OOB read/write via malicious font server 2026-08-17 07:39:26 +00:00
gating.yaml enabling gating for el9 2021-06-16 13:37:30 +02:00
libXfont2-2.0.3-CVE-2026-44950.patch Fix CVE-2026-44950: heap overflow in fs_read_glyphs() 2026-08-17 07:32:37 +00:00
libXfont2.spec Fix CVE-2026-59679: OOB read/write via malicious font server 2026-08-17 07:39:26 +00:00
sources RHEL 9.0.0 Alpha bootstrap 2020-10-15 15:21:06 +02:00