Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 42 fontforge Critical Remote Execution Fix FEDORA-2026-9b8156c2a9

fedora
Calendar Grey February 1, 2026
Dist Fedora Esm H88
Critical Fedora 42 fontforge update patches multiple remote execution issues addressing CVE-2025-15279 and others.
Resolves: CVE-2025-15279, CVE-2025-15275, CVE-2025-15269

Summary

FontForge (former PfaEdit) is a font editor for outline and bitmap

fonts. It supports a range of font formats, including PostScript

(ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType

(Type2) and CID-keyed fonts.

Update Information:

Resolves: CVE-2025-15279, CVE-2025-15275, CVE-2025-15269

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical remote code execution fontforge

Change Log

* Thu Jan 22 2026 Parag Nemade - 20230101-18 - Resolves: CVE-2025-15279 - Resolves: CVE-2025-15275 - Resolves: CVE-2025-15269

References


[ 1 ] Bug #2426577 - CVE-2025-15269 fontforge: FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2426577 [ 2 ] Bug #2426589 - CVE-2025-15275 fontforge: FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2426589 [ 3 ] Bug #2426593 - CVE-2025-15279 fontforge: FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2426593

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9b8156c2a9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: fontforge
Product: Fedora 42
Version: 20230101
Release: 18.fc42
URL: https://fontforge.org/
Summary: Outline and bitmap font editor

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical remote code execution fontforge

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here