The libXfont2 runtime library used by X.Org X11 contains two security flaws: CVE-2026-59679, an out-of-bounds read/write in the Font Server Client encoding[], and CVE-2026-44950, a heap buffer overflow in the Font Server Client that can lead to privilege escalation. Red Hat Product Security has rated these vulnerabilities as important and released updated libXfont2 packages for Red Hat Enterprise Linux 8 and related distributions. The update mitigates these issues by correcting the memory handling flaws in the font server client code. No CVSS scores were provided in the advisory, but the impact includes potential privilege escalation.

Successful exploitation of these vulnerabilities could allow an attacker to perform out-of-bounds memory operations and escalate privileges on affected Red Hat Enterprise Linux 8 systems. This could compromise system integrity and security by allowing unauthorized access or control. The issues affect the libXfont2 library used in the X.Org X11 environment, which is common in graphical Linux environments.

Red Hat has released updated libXfont2 packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 8 and related products should apply the security update as described in Red Hat advisory RHSA-2026:55446 and the referenced article https://access.redhat.com/articles/11258. Applying the official update is the recommended and effective mitigation. No additional vendor-recommended mitigations or workarounds are indicated.