April 2026 - fonts-bugs - Fedora mailing-lists

[Bug 2386191] New: Bold fonts in KDE Plasma are too bold
by bugzilla＠redhat.com 08 Jun '26

08 Jun '26

https://bugzilla.redhat.com/show_bug.cgi?id=2386191 Bug ID: 2386191 Summary: Bold fonts in KDE Plasma are too bold Product: Fedora Version: 42 Hardware: x86_64 OS: Linux Status: NEW Component: Fonts Keywords: Desktop Severity: medium Assignee: i18n-bugs(a)lists.fedoraproject.org Reporter: joshas(a)gmail.com QA Contact: fonts-bugs(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora After clean install of KDE Plasma Desktop, all bold fonts used in KDE applications, like System Settings or Dolphin are too bold. Reproducible: Always Steps to Reproduce: 1. Install Fedora KDE Plasma Desktop or run live session 2. Open System Settings 3. Notice bold font used in main section titles Actual Results: Font is too bold, making it hard to read. Expected Results: Standard bold font should be used. Additional Information: Disabling "Noto Sans ()" font from Font Management fixes the issue. Note, that this font has no name in the list. -- You are receiving this mail because: You are the QA Contact for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2386191 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2341340] New: senamirmir-washra-fonts: FTBFS in Fedora rawhide/f42
by bugzilla＠redhat.com 08 Jun '26

08 Jun '26

https://bugzilla.redhat.com/show_bug.cgi?id=2341340 Bug ID: 2341340 Summary: senamirmir-washra-fonts: FTBFS in Fedora rawhide/f42 Product: Fedora Version: rawhide Status: NEW Component: senamirmir-washra-fonts Assignee: aekoroglu(a)linux.intel.com Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: aekoroglu(a)linux.intel.com, fonts-bugs(a)lists.fedoraproject.org, nicolas.mailhot(a)laposte.net Blocks: 2300528 (F42FTBFS) Target Milestone: --- Classification: Fedora senamirmir-washra-fonts failed to build from source in Fedora rawhide/f42 https://koji.fedoraproject.org/koji/taskinfo?taskID=128146392 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild Please fix senamirmir-washra-fonts at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, senamirmir-washra-fonts will be orphaned. Before branching of Fedora 43, senamirmir-washra-fonts will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails… Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2300528 [Bug 2300528] Fedora 42 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2341340 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2308744] New: Upgrade Fira Sans to version 4.301 (post-Mozilla involvement) and package FiraGO
by bugzilla＠redhat.com 08 Jun '26

08 Jun '26

https://bugzilla.redhat.com/show_bug.cgi?id=2308744 Bug ID: 2308744 Summary: Upgrade Fira Sans to version 4.301 (post-Mozilla involvement) and package FiraGO Product: Fedora Version: 40 Hardware: All OS: Linux Status: NEW Component: mozilla-fira-fonts Severity: medium Assignee: ego.cordatus(a)gmail.com Reporter: mateusrodcosta(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: admiller(a)redhat.com, ego.cordatus(a)gmail.com, fonts-bugs(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora From https://bboxtype.com/fira/ : > Originally designed as a typeface for the Mozilla OS, Fira Sans has developed towards a standalone Open Font project. In 2012, we designed the firstversion of Fira in cooperation with Erik Spiekermann and Mozilla. Over the next years, Fira covered more and more languages and provided further weights and styles. > In 2016, with version 4.2, Mozilla decided to not put effort into the project anymore and in fact quit (please note that their Git is not up to date). Since 2016, we advance the project with the help of different partners. Fira Sans 4.3 will presumably be the last version. All upcoming extensions will be based on FiraGO. Essentially Mozilla stopped working on Fira Sans but it was kept being worked on by bBox Type GmbH. This might also make a opportunity to migrate to the Fira Mono version by bBox Type GmbH and also package FiraGo which isn't packaged yet. For more info about Fira GO vs Fira Sans: https://bboxtype.com/downloads/Projects/FiraGO_FiraSans_180109.pdf Migrating to the bBox Type versions might requiring renaming of the package to drop the "mozilla" prefix, as Mozilla is not involved anymore. Reproducible: Always This is essentially a request to move the Fira Sans e Fira Mono fonts from the Mozilla upstream to the bBox Type upstream. As an extra it's also a request to separately start packaging FiraGO, an extended version of Fira Sans with improved language support. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2308744 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 8

[Bug 2277345] New: NotoSansMono[wght].ttf file name causes scripts with failglob enabled to fail
by bugzilla＠redhat.com 08 Jun '26

08 Jun '26

https://bugzilla.redhat.com/show_bug.cgi?id=2277345 Bug ID: 2277345 Summary: NotoSansMono[wght].ttf file name causes scripts with failglob enabled to fail Product: Fedora Version: 40 Hardware: All OS: Linux Status: NEW Component: google-noto-fonts Severity: medium Assignee: tagoh(a)redhat.com Reporter: hartsjc(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, petersen(a)redhat.com, pwu(a)redhat.com, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora shopt failglob If set, patterns which fail to match filenames during pathname expansion result in an expansion error. Using this feature is good practice in scripts as helps prevent scripting mistakes; however, having file name with square brackets causes failures. And with Fedora 40 upgrade seems google-noto-sans-mono-vf-fonts-20240301-2.fc40.noarch has added one with: /usr/share/fonts/google-noto-vf/NotoSansMono[wght].ttf Reproducible: Always Steps to Reproduce: 1. Causes globs that don't expand to cause errors $ shopt -s failglob 2. Try use files from rpm as variable, and fail $ for file in $(rpm -q --list google-noto-sans-mono-vf-fonts) ; do [[ -f "/${file}" ]] || echo "${file}" done -bash: no match: /usr/share/fonts/google-noto-vf/NotoSansMono[wght].ttf 3. Note the RC $ echo $? 1 4. Or even command line $ rpm -qf /usr/share/fonts/google-noto-vf/NotoSansMono[wght].ttf -bash: no match: /usr/share/fonts/google-noto-vf/NotoSansMono[wght].ttf $ rpm -qf '/usr/share/fonts/google-noto-vf/NotoSansMono[wght].ttf' google-noto-sans-mono-vf-fonts-20240301-2.fc40.noarch Actual Results: -bash: no match: /usr/share/fonts/google-noto-vf/NotoSansMono[wght].ttf Expected Results: no error accessing files with failglob shopt enabled started fedora 40 upgrade, as daily script of mine fails because this file is included in initramfs too. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2277345 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 8

[Bug 2382666] New: fontawesome-fonts-7.0.0 is available
by bugzilla＠redhat.com 27 May '26

27 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2382666 Bug ID: 2382666 Summary: fontawesome-fonts-7.0.0 is available Product: Fedora Version: rawhide Status: NEW Component: fontawesome-fonts Keywords: FutureFeature, Triaged Assignee: loganjerry(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: davide(a)cavalca.name, fonts-bugs(a)lists.fedoraproject.org, loganjerry(a)gmail.com, mrunge(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 7.0.0 Upstream release that is considered latest: 7.0.0 Current version/release in rawhide: 6.7.2-2.fc42 URL: http://fontawesome.io Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/826/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/fontawesome-fonts -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2382666 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 14

[Bug 2450200] New: pango-1.57.1 is available
by bugzilla＠redhat.com 16 May '26

16 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2450200 Bug ID: 2450200 Summary: pango-1.57.1 is available Product: Fedora Version: rawhide Status: NEW Component: pango Keywords: FutureFeature, Triaged Assignee: pwu(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, mclasen(a)redhat.com, pwu(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 1.57.1 Upstream release that is considered latest: 1.57.1 Current version/release in rawhide: 1.57.0-4.fc45 URL: http://www.pango.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/11783/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/pango -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2450200 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 1532523] [google-droid-fonts] rebase to latest version
by bugzilla＠redhat.com 12 May '26

12 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=1532523 Fedora Admin user for bugzilla script actions <fedora-admin-xmlrpc(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|aekoroglu(a)linux.intel.com |aekoroglu(a)gmail.com --- Comment #15 from Fedora Admin user for bugzilla script actions <fedora-admin-xmlrpc(a)fedoraproject.org> --- This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=1532523 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

2 1

[Bug 2426599] New: CVE-2025-15280 fontforge: FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability [fedora-42]
by bugzilla＠redhat.com 06 May '26

06 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2426599 Bug ID: 2426599 Summary: CVE-2025-15280 fontforge: FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability [fedora-42] Product: Fedora Version: 42 Status: NEW Whiteboard: {"flaws": ["c0cde29b-bf92-4976-8812-3fb3bd0613c5"]} Component: fontforge Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: pnemade(a)redhat.com Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, pnemade(a)redhat.com Blocks: 2426430 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2426599 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2426595] New: CVE-2025-15276 fontforge: FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability [fedora-42]
by bugzilla＠redhat.com 06 May '26

06 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2426595 Bug ID: 2426595 Summary: CVE-2025-15276 fontforge: FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability [fedora-42] Product: Fedora Version: 42 Status: NEW Whiteboard: {"flaws": ["1d848b82-6cec-4ac8-a4e4-280ad45c7ad7"]} Component: fontforge Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: pnemade(a)redhat.com Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, pnemade(a)redhat.com Blocks: 2426424 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2426595 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2426592] New: CVE-2025-15278 fontforge: FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability [fedora-42]
by bugzilla＠redhat.com 06 May '26

06 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2426592 Bug ID: 2426592 Summary: CVE-2025-15278 fontforge: FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability [fedora-42] Product: Fedora Version: 42 Status: NEW Whiteboard: {"flaws": ["4b0e37b3-aee4-492b-a36a-853ead6f8450"]} Component: fontforge Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: pnemade(a)redhat.com Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, pnemade(a)redhat.com Blocks: 2426433 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2426592 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2426590] New: CVE-2025-15277 fontforge: FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42]
by bugzilla＠redhat.com 06 May '26

06 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2426590 Bug ID: 2426590 Summary: CVE-2025-15277 fontforge: FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42] Product: Fedora Version: 42 Status: NEW Whiteboard: {"flaws": ["735578d0-49ef-47a9-81a8-722f6674848e"]} Component: fontforge Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: pnemade(a)redhat.com Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, pnemade(a)redhat.com Blocks: 2426425 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2426590 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2426586] New: CVE-2025-15274 fontforge: FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42]
by bugzilla＠redhat.com 06 May '26

06 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2426586 Bug ID: 2426586 Summary: CVE-2025-15274 fontforge: FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42] Product: Fedora Version: 42 Status: NEW Whiteboard: {"flaws": ["6374512d-39d2-44ca-960c-5fa0950ba189"]} Component: fontforge Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: pnemade(a)redhat.com Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, pnemade(a)redhat.com Blocks: 2426435 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2426586 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2426584] New: CVE-2025-15273 fontforge: FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42]
by bugzilla＠redhat.com 06 May '26

06 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2426584 Bug ID: 2426584 Summary: CVE-2025-15273 fontforge: FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42] Product: Fedora Version: 42 Status: NEW Whiteboard: {"flaws": ["217f5fcc-cf4a-4f3e-b707-e9d285e674be"]} Component: fontforge Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: pnemade(a)redhat.com Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, pnemade(a)redhat.com Blocks: 2426428 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2426584 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2426582] New: CVE-2025-15272 fontforge: FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42]
by bugzilla＠redhat.com 06 May '26

06 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2426582 Bug ID: 2426582 Summary: CVE-2025-15272 fontforge: FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [fedora-42] Product: Fedora Version: 42 Status: NEW Whiteboard: {"flaws": ["ad1ad48b-092f-4eaa-ac54-b88088da82fa"]} Component: fontforge Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: pnemade(a)redhat.com Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, pnemade(a)redhat.com Blocks: 2426427 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2426582 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2426581] New: CVE-2025-15271 fontforge: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability [fedora-42]
by bugzilla＠redhat.com 06 May '26

06 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2426581 Bug ID: 2426581 Summary: CVE-2025-15271 fontforge: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability [fedora-42] Product: Fedora Version: 42 Status: NEW Whiteboard: {"flaws": ["cae1f386-b0d8-46dc-b522-63f7de7200a5"]} Component: fontforge Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: pnemade(a)redhat.com Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, pnemade(a)redhat.com Blocks: 2426422 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2426581 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2262410] New: Fonts are looking wrong after 20240101 update
by bugzilla＠redhat.com 05 May '26

05 May '26

https://bugzilla.redhat.com/show_bug.cgi?id=2262410 Bug ID: 2262410 Summary: Fonts are looking wrong after 20240101 update Product: Fedora Version: 39 Hardware: x86_64 OS: Linux Status: NEW Component: google-noto-fonts Severity: medium Assignee: tagoh(a)redhat.com Reporter: priv.luk(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, petersen(a)redhat.com, pwu(a)redhat.com, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Fonts look improperly in multiple places, e.g. mpv or KDE file picker. Reproducible: Always Steps to Reproduce: 1. Open mpv and look at OSD fonts Actual Results: Fonts look wrong Expected Results: Fonts look properly See https://github.com/mpv-player/mpv/issues/13396 for screenshots. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2262410 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 46

[Bug 2129399] Postscript standard symbol font is not looked up correctly
by bugzilla＠redhat.com 27 Apr '26

27 Apr '26

https://bugzilla.redhat.com/show_bug.cgi?id=2129399 Akira TAGOH <tagoh(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version|42 |rawhide Keywords| |FutureFeature --- Comment #37 from Akira TAGOH <tagoh(a)redhat.com> --- Any suggestions for Symbol substitute are welcome. I mark this as FutureFeature so far. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2129399 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 0

[Bug 2443653] New: freetype-2.14.2 is available
by bugzilla＠redhat.com 24 Apr '26

24 Apr '26

https://bugzilla.redhat.com/show_bug.cgi?id=2443653 Bug ID: 2443653 Summary: freetype-2.14.2 is available Product: Fedora Version: rawhide Status: NEW Component: freetype Keywords: FutureFeature, Triaged Assignee: mkasik(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: ajax(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, mclasen(a)redhat.com, mkasik(a)redhat.com, rstrode(a)redhat.com, suraj.ghimire7(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 2.14.2 Upstream release that is considered latest: 2.14.2 Current version/release in rawhide: 2.14.1-3.fc45 URL: https://www.freetype.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/854/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/freetype -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2443653 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 9

[Bug 2458742] New: sil-scheherazade-fonts-4.500 is available
by bugzilla＠redhat.com 15 Apr '26

15 Apr '26

https://bugzilla.redhat.com/show_bug.cgi?id=2458742 Bug ID: 2458742 Summary: sil-scheherazade-fonts-4.500 is available Product: Fedora Version: rawhide Status: NEW Component: sil-scheherazade-fonts Keywords: FutureFeature, Triaged Assignee: hedayatv(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, hedayatv(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 4.500 Upstream release that is considered latest: 4.500 Current version/release in rawhide: 4.400-1.fc45 URL: https://software.sil.org/scheherazade Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/4821/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/sil-scheherazade-fonts -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2458742 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2451645] New: CVE-2026-34085 fontconfig: Fontconfig: Security flaw allows arbitrary code execution or system crash [fedora-all]
by bugzilla＠redhat.com 07 Apr '26

07 Apr '26

https://bugzilla.redhat.com/show_bug.cgi?id=2451645 Bug ID: 2451645 Summary: CVE-2026-34085 fontconfig: Fontconfig: Security flaw allows arbitrary code execution or system crash [fedora-all] Product: Fedora Version: rawhide Status: NEW Whiteboard: {"flaws": ["65df9a0b-8d8a-40c1-a4e1-f6ae7b5cc3e9"]} Component: fontconfig Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: tagoh(a)redhat.com Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: ajax(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, mclasen(a)redhat.com, rstrode(a)redhat.com, tagoh(a)redhat.com Blocks: 2451414 (CVE-2026-34085) Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2451414 [Bug 2451414] CVE-2026-34085 fontconfig: Fontconfig: Security flaw allows arbitrary code execution or system crash -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2451645 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2449666] New: abattis-cantarell-fonts: update to 0.311
by bugzilla＠redhat.com 06 Apr '26

06 Apr '26

https://bugzilla.redhat.com/show_bug.cgi?id=2449666 Bug ID: 2449666 Summary: abattis-cantarell-fonts: update to 0.311 Product: Fedora Version: 44 Hardware: x86_64 OS: Linux Status: NEW Component: abattis-cantarell-fonts Keywords: Upgrades Severity: low Assignee: mclasen(a)redhat.com Reporter: trkrksn(a)proton.me QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, kalevlember(a)gmail.com, mclasen(a)redhat.com, me(a)fale.io, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora The abattis-cantarell-fonts package in fc44 is significantly behind upstream. Fedora ships 0.301 (December 2020) while upstream is at 0.311 (January 2026), skipping four releases: 0.302 — variable font made the default; statics still available 0.303 — PostScript name fix for 0.302 0.310 — ss01 ligature improvements, autohinting fixes, new translations 0.311 — ss01 variant for the "fl" ligature Upstream release notes for 0.310 include a packagers note: "I recommend installing only the VF by default to avoid duplicate font entries (VF and statics have the same family name). When apps have issues with just the VF, please report them upstream." Full changelog: https://gitlab.gnome.org/GNOME/cantarell-fonts/-/tags Thanks Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2449666 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 2402600] New: google-roboto-fonts-3.013 is available
by bugzilla＠redhat.com 05 Apr '26

05 Apr '26

https://bugzilla.redhat.com/show_bug.cgi?id=2402600 Bug ID: 2402600 Summary: google-roboto-fonts-3.013 is available Product: Fedora Version: rawhide Status: NEW Component: google-roboto-fonts Keywords: FutureFeature, Triaged Assignee: dtardon(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: davide(a)cavalca.name, dtardon(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 3.000, 3.001, 3.002, 3.003, 3.004, 3.005, 3.006, 3.007, 3.008, 3.009, 3.010, 3.011, 3.012, 3.013 Upstream release that is considered latest: 3.013 Current version/release in rawhide: 2.138-20.fc43 URL: https://github.com/googlefonts/roboto-3-classic Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/12041/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/google-roboto-fonts -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2402600 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2402531] New: fedora is using obselete version of Roboto font
by bugzilla＠redhat.com 05 Apr '26

05 Apr '26

https://bugzilla.redhat.com/show_bug.cgi?id=2402531 Bug ID: 2402531 Summary: fedora is using obselete version of Roboto font Product: Fedora Version: 42 Status: NEW Component: google-roboto-fonts Assignee: dtardon(a)redhat.com Reporter: uneasy_latitude544(a)simplelogin.com QA Contact: extras-qa(a)fedoraproject.org CC: davide(a)cavalca.name, dtardon(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Description of problem: fedora is using old version of Roboto font, see readme in https://github.com/googlefonts/roboto-2?tab=readme-ov-file, more updated version https://github.com/googlefonts/roboto-3-classic v3.012 Version-Release number of selected component (if applicable): v2.138 How reproducible: Yes. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2402531 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs April 2026