Alerts This Week
Warning Icon 1 409
Alerts This Week
Warning Icon 1 409

Ubuntu 24: glyphutils Severe RCE Unrestricted File Access 2025-abcd1234ef

fedora
Calendar Grey December 20, 2025
Dist Fedora Esm H88
Critical security advisory for fonttools in Fedora 42 addresses arbitrary file write leading to remote code execution.
Update to 17.0.0 version (#2412270) Update fonttools 4.61.0

Summary

fontTools is a library for manipulating fonts, written in Python. The project

includes the TTX tool, that can convert TrueType and OpenType fonts to and from

an XML text format, which is also called TTX. It supports TrueType, OpenType,

AFM and to an extent Type 1 and some Mac-specific formats.

Update Information:

Update to 17.0.0 version (#2412270) Update fonttools 4.61.0

Topics%20covered

Topics Covered

security advisory fedora update remote code execution arbitrary file write fonttools

Change Log

* Tue Dec 9 2025 Parag Nemade - 4.61.0-1 - Update to 4.61.0 version (#2419183) * Thu Oct 2 2025 Parag Nemade - 4.60.1-1 - Update to 4.60.1 version (#2400374) * Fri Sep 19 2025 Python Maint - 4.60.0-2 - Rebuilt for Python 3.14.0rc3 bytecode * Wed Sep 17 2025 Parag Nemade - 4.60.0-1 - Update to 4.60.0 version (#2396057) * Thu Aug 28 2025 Parag Nemade - 4.59.2-1 - Update to 4.59.2 version (#2391330) * Fri Aug 15 2025 Python Maint - 4.59.1-2 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Aug 15 2025 Parag Nemade - 4.59.1-1 - Update to 4.59.1 version (#2388618) * Wed Jul 23 2025 Fedora Release Engineering - 4.59.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Jul 18 2025 Parag Nemade - 4.59.0-2 - Skip failing test test_ttcompile_timestamp_calcs * Wed Jul 16 2025 Parag Nemade - 4.59.0-1 - Update to 4.59.0 version (#2381317) * Fri Jul 4 2025 Parag Nemade - 4.58.5-1 - Update to 4.58.5 version (#2376209) * Mon Jun 16 2025 Benjamin A. Beasley - 4.58.4-1 - Update to 4.58.4 version (#2370864) - No longer bootstrapping (build with tests enabled) * Sun Jun 15 2025 Python Maint - 4.58.1-3 - Bootstrap for Python 3.14 * Tue Jun 3 2025 Python Maint - 4.58.1-2 - Bootstrap for Python 3.14 * Thu May 29 2025 Parag Nemade - 4.58.1-1 - Update to 4.58.1 version (#2368984) * Mon May 12 2025 Parag Nemade - 4.58.0-1 - Update to 4.58.0 version (#2365442) * Fri Apr 4 2025 Parag Nemade - 4.57.0-1 - Update to 4.57.0 version (#2357231)

References


[ 1 ] Bug #2421330 - CVE-2025-66034 fonttools: fontTools: Arbitrary file write leading to remote code execution via malicious .designspace file [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2421330

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-58e2bb0f1e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: fonttools
Product: Fedora 42
Version: 4.61.0
Release: 1.fc42
URL: https://github.com/fonttools/fonttools/
Summary: Tools to manipulate font files

Topics%20covered

Topics Covered

security advisory fedora update remote code execution arbitrary file write fonttools

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here