[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6388-1] libxfont security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6388-1] libxfont security update From: Salvatore Bonaccorso <carnil@debian.org> Date: Wed, 15 Jul 2026 04:35:42 +0000 Message-id: <[🔎] E1wjrLS-00000004VQR-1vey@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6388-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libxfont CVE ID : CVE-2026-56001 CVE-2026-56002 CVE-2026-56003 Debian Bug : 1141702 Several vulnerabilities were discovered in libXfont, the X11 font rasterisation library, which may result in arbitrary code execution in the X server context for authenticated X clients. For the stable distribution (trixie), these problems have been fixed in version 1:2.0.6-1+deb13u1. We recommend that you upgrade your libxfont packages. For the detailed security status of libxfont please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libxfont Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmpXDbpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0TzJxAAnTnXxwDXzShABHCCRQquJZlOP+VCYOjJjt6bon9zuypqdp19iqy8YBFP LSTKn9qWqVqZ9NLgHnGqELkE1c43ZK0ObtjCBC2rFFp1HPRMLXkhI/z/G4IHsVcd 3Y1NwYHwX8Yt0tKRd46BQxnIK1Bejhcz190dQuse8nDnVBXC8lE3mDVMALWoABj1 zavrUo1Qhlx4s5/sVHmuJJpz54AExA108YMtjKfZ/fVP3Ky7sNh4rYpY+qMsOCgj g9OxzPplDbG4E9SJPfIxD9gESfZDiG1ihijv2jUMPv0cxLnGsxRljtVkJ+Nzx7u3 1nZl65nkq5iNa6V9Ri2/cJUG6yOIgf25QdcIjLCjmFFMXaoYEq/lQuLShucre391 NarQFrcKrtkpgUnAeyNL2QTEv8RlEDpC8XPL1ZGJCuuetJqRM0J/KnFPAOhLioFS 7bxqUFPaiGZQ9s9JMr/Nvt3JpQHaEsAkVU26AucYtugqjJAArljho8VQ20tUKFOG KaH1TXpcAscB4f3Ef/0/sRHCjZcUCNNZ/UJ1CP4cSO9+fhJTdium+kH/VjujKtGm pfOvaH9sf+NA8kxvVTmTJTkIbTp0QlGuNY3BikpNSRtIPmCLF883lXWzQVWJ49Tv q+VGfSWF78ioLp4axbrIjg3hzR+bji+Dk2CAGslbo/W0Gw/H95U= =aToS -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Salvatore Bonaccorso (on-list) Salvatore Bonaccorso (off-list) Prev by Date: [SECURITY] [DSA 6387-1] chromium security update Previous by thread: [SECURITY] [DSA 6387-1] chromium security update Index(es): Date Thread