Red Hat Security Advisory

RHSA-2026:13722

Red Hat Hardened Images RPMs Security Update

Released 2026-05-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images fontconfig-2.17.1-0.1.hum1@aarch64, fontconfig-2.17.1-0.1.hum1@src, fontconfig-2.17.1-0.1.hum1@x86_64 +4

Fixes 1 record

TI-2026-26407 CVE-2026-34085 · GHSA-jxv8-p782-98cx

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability…

LOW 33

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00129 Published 2026-03-25 Partial fix · 2.17.1 CWE-193