LibXfont, LibXfont2: Multiple vulnerabilities Multiple vulnerabilities have been found in LibXfont and Libxfont2, the worst of which could allow attackers to cause a Denial of Service condition. libxfont,libxfont2 2017-11-11 2017-11-11 634044 local 2.0.2 2.0.2 1.5.3 1.5.3

X.Org Xfont library

Multiple vulnerabilities have been discovered in LibXfont and LibXfont2. Please review the referenced CVE identifiers for details.

Local attackers could obtain sensitive information or possibly cause a Denial of Service condition.

There is no known workaround at this time.

All LibXfont2 users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=x11-libs/libXfont2-2.0.2"

All LibXfont users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=x11-libs/libXfont-1.5.3"
CVE-2017-13720 CVE-2017-13722 jmbailey jmbailey