BSD Ports

x11-fonts/libXfont2 2.0.9 MidnightBSD

X font library

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
ea98bc365d
License
mit
Categories
x11-fonts

Description

This package contains the X font libary

In the other systems

The newest version among them is 2.0.9, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
MidnightBSDx11-fonts/libXfont22.0.9 newestno data-[email protected]2026-08-04
FreeBSDx11-fonts/libXfont22.0.9 newestnone known-[email protected]2026-09-08
DragonFlyx11-fonts/libXfont22.0.6 behind since 2026-07-082 known-[email protected]-
HardenedBSDx11-fonts/libXfont22.0.9 newestno data-[email protected]-
GhostBSDx11-fonts/libXfont22.0.9 newestno data-[email protected]-

Version history 2

  1. 2.0.9 ea98bc365d
  2. 2.0.8 7dbbf45a85

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

mport install libXfont2

From mports:

cd /usr/mports/x11-fonts/libXfont2 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	libXfont2>0:x11-fonts/libXfont2
LIB_DEPENDS=	libXfont2.so:x11-fonts/libXfont2

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

As this port's Makefile names them.

Library 1

Build dependencies 1
Run dependencies 1

No port depends on this one.

Related ports

The same software or family in MidnightBSD: one homepage, or one name but for a version or a variant.

Configuration

No options to configure.

USES
tar:xz xorg xorg-cat:lib cpe
Service scripts
none

Files

pkg-plist 6
  • include/X11/fonts/libxfont2.h
  • lib/libXfont2.a
  • lib/libXfont2.so
  • lib/libXfont2.so.2
  • lib/libXfont2.so.2.0.0
  • libdata/pkgconfig/xfont2.pc
distinfo 1
FileSizeSHA256
xorg/lib/libXfont2-2.0.9.tar.xz478844f042a370666815e7b941e9b7019024755bd1c6c2954afbfa515af378251799e2

Commit history 2

DateCommitCreditsLog message
ea98bc365d Lucas Holt x11-fonts/libXfont2: update to 2.0.9 to fix two font-server vulnerabilities (#686)
Updates `x11-fonts/libXfont2` 2.0.8 → 2.0.9, released 2026-08-05. ## Vulnerabilities fixed Both are in the font-server client code and reachable from a malicious or compromised font server: **CVE-2026-44950** — `fs_read_glyphs()` copies each glyph's bitmap into a single `allbits` buffer sized to `rep->nbytes`. The per-glyph guard only validated that the *source* slice lay within the source buffer, not that the running *destination* cursor stayed within the allocation. Overlapping source offsets (e.g. 1000 glyphs each referencing `{position:0, length:64}` with `nbytes=64`) each pass validation individually while cumulatively writing 64000 bytes into a 64-byte buffer. **CVE-2026-59679** — the `encoding[]` array is allocated while handling …
7dbbf45a85 Lucas Holt x11-fonts/libXfont2: update to 2.0.8 (security) (#623)
Updates `x11-fonts/libXfont2` from 2.0.5 to 2.0.8 to address the X.Org security advisory of 2026-07-08 (issues in libXfont2 prior to 2.0.8). ## CVEs fixed - **CVE-2026-56001** — `BitmapScaleBitmaps()` integer overflow heap buffer overflow - **CVE-2026-56002** — `pcfReadFont()` PCF font parsing heap buffer overflow - **CVE-2026-56003** — `ComputeScaledProperties()` property buffer heap overflow All three fixes verified present in the 2.0.8 source. ## Changes - `PORTVERSION` 2.0.5 → 2.0.8 - Added `tar:xz` to `USES` (2.0.8 ships as `.tar.xz`) - Regenerated `distinfo` ## Notes - Shared library soname is unchanged (`libXfont2.so.2`), so no dependent `PORTREVISION` bumps are required. - Validated with `bmake` build / `fake` (clean plist) / `package` on amd64. …