Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 3

Vulnerabilities 1

• Medium 5.9
  CVE-2026-34085

  fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte o…

  fontconfig project fontconfig
  Mar 25, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-34085
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13722.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2451414
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34085
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34085
• article
  https://gitlab.freedesktop.org/fontconfig/fontconfig/-/commit/b9bec06d73340f1b5727302d13ac3df307b7febc
• article
  https://gitlab.freedesktop.org/fontconfig/fontconfig/-/merge_requests/446
• article
  https://gitlab.freedesktop.org/fontconfig/fontconfig/-/work_items/481