[UPDATE] [high] Red Hat Enterprise Linux (fontforge): Multiple vulnerabilities allow code execution

An attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to execute arbitrary code.

CSIRTS triage

What: Multiple vulnerabilities in Red Hat Enterprise Linux can allow arbitrary code execution.
Who is affected: Users of Red Hat Enterprise Linux are affected by these vulnerabilities.
Urgency: Remediation is urgent due to the high severity and potential for exploitation.
Action: Apply the latest patches for Red Hat Enterprise Linux.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Red Hat Enterprise Linux

Get an email when a new Red Hat Enterprise Linux advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2025-152690.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all EPSS-scored CVEs.
Low exploitation riskCVE-2025-152750.56% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
Low exploitation riskCVE-2025-152790.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.

CVE	CSIRTS overview	External
CVE-2025-15269	coverage & exploitation status	NVD · CVE.org
CVE-2025-15275	coverage & exploitation status	NVD · CVE.org
CVE-2025-15279	coverage & exploitation status	NVD · CVE.org