Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Fedora 41: 2025-49614a7cdf critical: woff security issue resolved

fedora
Calendar Grey May 20, 2025
Scroller Fedora
Patch release for Fedora 41 addressing CVE-2010-1028 alongside additional fixes; apply using the dnf command line utility.
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

Summary

Provides the sfnt2woff and woff2sfnt command-line tools for encoding and

decoding Web Open Font Format (WOFF) files.

Update Information:

Security fix for CVE-2010-1028 and other security-relevant bugs; see zopfli/pull/20/commits.

Topics%20covered

Topics Covered

security advisory critical software update Fedora bug fix woff

Change Log

* Sun May 11 2025 Benjamin A. Beasley - 0.20091126-47 - Security fix for CVE-2010-1028 - Various other fixes collected by Debian and contributed back upstream to the sfnt2woff-zopfli fork: zopfli/pull/20 * Sun May 11 2025 Benjamin A. Beasley - 0.20091126-46 - Extract the license notice and install it in its own file * Sun May 11 2025 Benjamin A. Beasley - 0.20091126-45 - Add missing license texts * Sun May 11 2025 Benjamin A. Beasley - 0.20091126-44 - Update .rpmlintrc file for current rpmlint * Sun May 11 2025 Benjamin A. Beasley - 0.20091126-43 - Link sfnt2woff-zopfli PR for double-free patch * Sun Jan 19 2025 Fedora Release Engineering - 0.20091126-42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

References

Fedora Update Notification FEDORA-2025-49614a7cdf 2025-05-20 01:45:49.098339+00:00 Name : woff Product : Fedora 41 Version : 0.20091126 Release : 47.fc41 URL : https://web.archive.org/https://people-mozilla.org/~jkew/woff/ Summary : Encoding and decoding for Web Open Font Format (WOFF) Description : Provides the sfnt2woff and woff2sfnt command-line tools for encoding and decoding Web Open Font Format (WOFF) files.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-49614a7cdf' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: woff
Product: Fedora 41
Version: 0.20091126
Release: 47.fc41
URL: https://web.archive.org/https://people-mozilla.org/~jkew/woff/
Summary: Encoding and decoding for Web Open Font Format (WOFF)

Topics%20covered

Topics Covered

security advisory critical software update Fedora bug fix woff

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.