Description:
FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.
Security Fix(es):
* fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279)
* fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269)
* fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
fontforge-20230101-14.el10_1.aarch64.rpm |
4b9724b325e4b37a8fb7c7b5c29f3b681104296f97b6b78ab976c1a894cc1044 |
| ppc64le |
fontforge-20230101-14.el10_1.ppc64le.rpm |
2ed1233963ba031982f395b7df187508ed46bcf3b80514c9faa273613a994606 |
| s390x |
fontforge-20230101-14.el10_1.s390x.rpm |
ea393157653dabbc864aa02ea7a1764634bd1a5874c1dc816c64000ee0274bfa |
| x86_64 |
fontforge-20230101-14.el10_1.x86_64.rpm |
116dea6881618a0d8facfd77453e89eb5d262474f24ee13f80946593dcbe50fa |
| x86_64_v2 |
fontforge-20230101-14.el10_1.x86_64_v2.rpm |
b3eb51b332e6a1e021dba76107ec1cc9c46b410ca2334ca609555ee62f223b2f |