[Apollo] Advisories Statistics light light Login

RLSA-2026:3407

Security Mirrored from RHSA-2026:3407
Issued at: 2026-03-03
Updated at: 2026-03-03

Synopsis

Important: mingw-fontconfig security update



Description

MinGW Windows Fontconfig library.

Security Fix(es):

* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2395108

CVEs

CVE-2025-59375

Affected packages

Rocky Linux 8 x86_64 - PowerTools

mingw32-fontconfig-0:2.12.6-4.el8_10.noarch.rpm mingw32-fontconfig-debuginfo-0:2.12.6-4.el8_10.noarch.rpm mingw64-fontconfig-0:2.12.6-4.el8_10.noarch.rpm mingw64-fontconfig-debuginfo-0:2.12.6-4.el8_10.noarch.rpm mingw-fontconfig-0:2.12.6-4.el8_10.src.rpm

Rocky Linux 8 aarch64 - PowerTools

mingw-fontconfig-0:2.12.6-4.el8_10.src.rpm