Important: fontforge

Issue Overview: FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

fontforge security update

20201107-7 - Resolves: RHEL-138206 CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow - Resolves: RHEL-138228 CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow - Resolves: RHEL-138158 CVE-2025-15269 SFD File Parsing Use-After-Free...

Amazon Linux 2023 : fontforge, fontforge-devel (ALAS2023-2026-1378)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1378 advisory. FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User...

Important: fontforge security update

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: fontforge: FontForge: Remote Code Execution via heap-based buffer...

Amazon Linux 2 : fontforge, --advisory ALAS2-2026-3153 (ALAS-2026-3153)

The version of fontforge installed on the remote host is prior to 20120731b-13. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3153 advisory. FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote...

Important: fontforge

Issue Overview: FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

Oracle Linux 9 : fontforge (ELSA-2026-2039)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-2039 advisory. - Resolves: RHEL-138206 CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow - Resolves: RHEL-138228 CVE-2025-15275 SFD File Parsing...

ALSA-2026:2039 Important: fontforge security update

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: fontforge: FontForge: Remote Code Execution via heap-based buffer...

RHEL 9 : fontforge (RHSA-2026:2039)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:2039 advisory. FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1,...

Fedora: Security Advisory (FEDORA-2026-9b8156c2a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-746c4a59e2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: fontforge-20230101-18.fc42

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...

[SECURITY] Fedora 43 Update: fontforge-20230101-19.fc43

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...

fontforge-20251009-4.1 on GA media (moderate)

fontforge-20251009-4.1 on GA media Announcement ID: openSUSE-SU-2026:10122-1 Rating: moderate Cross-References: CVE-2025-15269 CVE-2025-15275 CVE-2025-15279 CVSS scores: CVE-2025-15269 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-15275 SUSE : 8.8...

Fedora 43 : fontforge (2026-746c4a59e2)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-746c4a59e2 advisory. Resolves: CVE-2025-15279, CVE-2025-15275, CVE-2025-15269 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 42 : fontforge (2026-9b8156c2a9)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9b8156c2a9 advisory. Resolves: CVE-2025-15279, CVE-2025-15275, CVE-2025-15269 Tenable has extracted the preceding description block directly from the Fedora security...

OPENSUSE-SU-2026:10122-1 fontforge-20251009-4.1 on GA media

These are all security issues fixed in the fontforge-20251009-4.1 package on the GA media of openSUSE Tumbleweed...

MiracleLinux 8 : fontforge-20200314-6.el8 (AXSA:2024-8552:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8552:01 advisory. fontforge: command injection via crafted filenames CVE-2024-25081 fontforge: command injection via crafted archives or compressed files CVE-2024-250...

MiracleLinux 9 : fontforge-20201107-6.el9 (AXSA:2024-9309:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-9309:02 advisory. fontforge: command injection via crafted archives or compressed files CVE-2024-25082 fontforge: command injection via crafted filenames CVE-2024-250...

MiracleLinux 7 : fontforge-20120731b-13.el7 (AXSA:2020-749:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-749:01 advisory. fontforge: out-of-bounds write in SFDGetFontMetaData function in sfd.c CVE-2020-5395 Tenable has extracted the preceding description block directly from the...