tocsin

Alpine/libxfont2: high 8.8

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

Action: Upgrade libxfont2 to 2.0.8-r0 or later.

Affected

introducedfixedlast affected
02.0.8-r0-

Fixed versions

2.0.8-r0

Sources

published · modified · JSON