ELSA-2026-2230

ELSA-2026-2230 - fontforge security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-02-09

Description

[20230101-14]
- Resolves: RHEL-138159
CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138144
CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138126
CVE-2025-15269 SFD File Parsing Use-After-Free

Related CVEs

CVE-2025-15269

CVE-2025-15275

CVE-2025-15279

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	fontforge-20230101-14.el10_1.src.rpm	b34f11f51b31fdd78ca26e5d43282bb9f4aac1e34c431b223e8fd0073b17a832	-	ol10_aarch64_codeready_builder
	fontforge-20230101-14.el10_1.aarch64.rpm	eb6ebb6c778fde909d315d9299566bec45d16417644e5a1ad33ab88a165fccb7	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	fontforge-20230101-14.el10_1.src.rpm	b34f11f51b31fdd78ca26e5d43282bb9f4aac1e34c431b223e8fd0073b17a832	-	ol10_x86_64_codeready_builder
	fontforge-20230101-14.el10_1.x86_64.rpm	1be372e055ef3667890abb810069a895ac8f703cb137b17b095f4b57a8695d88	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team