X.Org X11 libXfont2 runtime library
Backport upstream fix for CVE-2026-44950 to libXfont2 2.0.3.
The fix adds a bounds-check for cumulative glyph data writes
in fs_read_glyphs() to prevent heap overflow from overlapping
source offsets sent by a malicious font server. A new regression
test (test-fserve-read-glyphs.c) is included to verify the fix.
CVE: CVE-2026-44950
Upstream patches:
-
|
||
|---|---|---|
| .gitignore | ||
| 0001-bitscale-fix-integer-overflow-in-BitmapScaleBitmaps-.patch | ||
| 0002-pcfread-validate-bitmap-sizes-and-offsets-against-pe.patch | ||
| 0003-bitscale-add-bounds-check-to-computeProps-for-proper.patch | ||
| gating.yaml | ||
| libXfont2-2.0.3-CVE-2026-44950.patch | ||
| libXfont2.spec | ||
| sources | ||