ELSA-2026-2039

ELSA-2026-2039 - fontforge security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-02-05

Description

[20201107-7]
- Resolves: RHEL-138206
CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138228
CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138158
CVE-2025-15269 SFD File Parsing Use-After-Free

Related CVEs

CVE-2025-15269

CVE-2025-15275

CVE-2025-15279

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	fontforge-20201107-7.el9_7.src.rpm	521225c147294c514405b2204986f3d6fb103d1b052c61060415fdb921a69c0d	-	ol9_aarch64_codeready_builder
	fontforge-20201107-7.el9_7.aarch64.rpm	108cca873b82d2d6f477c69d8556a0ac87a631fea7893bcea96405884f27205f	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	fontforge-20201107-7.el9_7.src.rpm	521225c147294c514405b2204986f3d6fb103d1b052c61060415fdb921a69c0d	-	ol9_x86_64_codeready_builder
	fontforge-20201107-7.el9_7.i686.rpm	71c6fc346c3b6341b577fcb0c9cd18632bf19b9467e1a884d22617f316c4a080	-	ol9_x86_64_codeready_builder
	fontforge-20201107-7.el9_7.x86_64.rpm	0e6142186c103e001516a92468a31998509bb22282cf7910e06ee6e069747d09	-	ol9_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team