Description:
FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.
Security Fix(es):
* fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279)
* fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269)
* fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
fontforge-20201107-7.el9_7.aarch64.rpm |
a4dcc8c46b505bff777ba982999c0889904224bff34d7f8824f1dc1a5eee1b1d |
| i686 |
fontforge-20201107-7.el9_7.i686.rpm |
c1f3fd59015f233656f63bd6bf43515adcb1fb56dc579e67cc671bb3ab09f8af |
| ppc64le |
fontforge-20201107-7.el9_7.ppc64le.rpm |
25f1238be5e5a4859904df2ec45b3695110da38092b08e53d9220f0f4bd59f2a |
| s390x |
fontforge-20201107-7.el9_7.s390x.rpm |
acf6b292ddf457351a598b2540ba7136db808efafa92c6747fb30f036755326a |
| x86_64 |
fontforge-20201107-7.el9_7.x86_64.rpm |
5011d874eb13f44496980d79ae0b8cd9bfa004db13120c468575164c2a263041 |