Back Linuxsecurity

Fedora 43 libXfont2 Critical RCE Threat 2026

Linuxsecurity •LinuxSecurity Advisories • July 12, 2026

* Wed Jul 8 2026 Peter Hutterer - 2.0.8-1 - libXfont2 2.0.8 (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003) * Fri Jan 16 2026 Fedora Release Engineering - 2.0.7-4 - Rebuilt for

Fedora Update Notification FEDORA-2026-18ea3f47f8 2026-07-12 00:58:35.903692+00:00 Name : libXfont2 Product : Fedora 43 Version : 2.0.8 Release : 1.fc43 URL : Summary : X.Org X11 libXfont2 runtime library Description : X.Org X11 libXfont2 runtime library

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-18ea3f47f8' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerabilities in Fedora libXfont2 Affecting Multiple CVEs On July 8, 2026, three critical vulnerabilities (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003) were disclosed in the libXfont2 library, affecting Fedora 43 and 44. These vulnerabilities allow for remote code execution, posing a significant risk to systems using these versions. Users are advised to upgrade to libXfont2 version 2.0.8 to mitigate these risks. The vulnerabilities were confirmed by Peter Hutterer, the maintainer, and are categorized as critical due to their potential for exploitation. The updates can be installed using the 'dnf' package manager. The current status is that patches are available, but the urgency remains high due to the critical nature of the vulnerabilities. Administrators are urged to apply the updates promptly to secure their systems. 2 sources 73

Extracted Entities

Fedora 43 libXfont2 Critical RCE Threat 2026

The full story

Extracted Entities

Attack Types (2)

CVEs (3)

Platforms (1)