RLSA-2026:6631

Synopsis

Important: fontforge security update

Description

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

* fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2426434

CVEs

CVE-2025-15270

Affected packages

Rocky Linux 10 aarch64 - CRB

fontforge-debuginfo-0:20230101-15.el10_1.aarch64.rpm fontforge-debugsource-0:20230101-15.el10_1.aarch64.rpm fontforge-0:20230101-15.el10_1.src.rpm fontforge-0:20230101-15.el10_1.aarch64.rpm

Rocky Linux 10 ppc64le - CRB

fontforge-debugsource-0:20230101-15.el10_1.ppc64le.rpm fontforge-debuginfo-0:20230101-15.el10_1.ppc64le.rpm fontforge-0:20230101-15.el10_1.src.rpm fontforge-0:20230101-15.el10_1.ppc64le.rpm

Rocky Linux 10 s390x - CRB

fontforge-0:20230101-15.el10_1.src.rpm fontforge-debugsource-0:20230101-15.el10_1.s390x.rpm fontforge-0:20230101-15.el10_1.s390x.rpm fontforge-debuginfo-0:20230101-15.el10_1.s390x.rpm

Rocky Linux 10 x86_64 - CRB

fontforge-0:20230101-15.el10_1.src.rpm fontforge-debugsource-0:20230101-15.el10_1.x86_64.rpm fontforge-debuginfo-0:20230101-15.el10_1.x86_64.rpm fontforge-0:20230101-15.el10_1.x86_64.rpm