RLSA-2026:2230

Synopsis

Important: fontforge security update

Description

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

* fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279)

* fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269)

* fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2426423 2426429 2426421

CVEs

CVE-2025-15269 CVE-2025-15275 CVE-2025-15279

Affected packages

Rocky Linux 10 ppc64le - CRB

fontforge-debuginfo-0:20230101-14.el10_1.ppc64le.rpm fontforge-debugsource-0:20230101-14.el10_1.ppc64le.rpm fontforge-0:20230101-14.el10_1.ppc64le.rpm fontforge-0:20230101-14.el10_1.src.rpm

Rocky Linux 10 aarch64 - CRB

fontforge-0:20230101-14.el10_1.aarch64.rpm fontforge-debuginfo-0:20230101-14.el10_1.aarch64.rpm fontforge-0:20230101-14.el10_1.src.rpm fontforge-debugsource-0:20230101-14.el10_1.aarch64.rpm

Rocky Linux 10 s390x - CRB

fontforge-debugsource-0:20230101-14.el10_1.s390x.rpm fontforge-0:20230101-14.el10_1.src.rpm fontforge-0:20230101-14.el10_1.s390x.rpm fontforge-debuginfo-0:20230101-14.el10_1.s390x.rpm

Rocky Linux 10 x86_64 - CRB

fontforge-debugsource-0:20230101-14.el10_1.x86_64.rpm fontforge-0:20230101-14.el10_1.x86_64.rpm fontforge-debuginfo-0:20230101-14.el10_1.x86_64.rpm fontforge-0:20230101-14.el10_1.src.rpm