Red Hat Security Advisory

RHSA-2026:3407

mingw-fontconfig security update

Released 2026-02-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux CRB (v. 8) mingw-fontconfig-2.12.6-4.el8_10, mingw32-fontconfig-2.12.6-4.el8_10, mingw64-fontconfig-2.12.6-4.el8_10

TI-2025-36934 CVE-2025-59375 · GHSA-vjqp-pjp6-xcxx

LOW 36

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0138 Published 2025-09-15 Partial fix · 2.7.2 CWE-770