X.Org X11 libXfont2 runtime library
Backport upstream commit 668fea81 to fix CVE-2026-59679, an
out-of-bounds read/write vulnerability in fs_read_glyphs().
The fix validates that num_chars from the FS_QueryXBitmaps16
reply does not exceed the encoding array size allocated during
FS_QueryXExtents16 handling, preventing exploitation by a
malicious font server. A regression test is included.
CVE: CVE-2026-59679
Upstream patches:
-
|
||
|---|---|---|
| .gitignore | ||
| 0001-bitscale-fix-integer-overflow-in-BitmapScaleBitmaps-.patch | ||
| 0002-pcfread-validate-bitmap-sizes-and-offsets-against-pe.patch | ||
| 0003-bitscale-add-bounds-check-to-computeProps-for-proper.patch | ||
| 0004-fserve-validate-num_chars-against-encoding-array-siz.patch | ||
| gating.yaml | ||
| libXfont2-2.0.3-CVE-2026-44950.patch | ||
| libXfont2.spec | ||
| sources | ||