ALSA-2024:4267 Moderate: fontforge security update

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: fontforge: command injection via crafted filenames CVE-2024-25081...

RHEL 8 : fontforge (RHSA-2024:4267)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4267 advisory. FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1,...

Medium: fontforge

Issue Overview: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. CVE-2024-25082 Affected Packages: fontforge Note: This advisory is...

Medium: fontforge

Issue Overview: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. CVE-2024-25082 Affected Packages: fontforge Note: This advisory is...

BIT-PERCONA-XTRABACKUP-BINARY-2022-25834

In Percona XtraBackup PXB through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary commands...

emacs: ctags local command execution vulnerability

A flaw was found in Etags, the Ctags implementation of Emacs. A file with a crafted filename may result in arbitrary command execution when processed by Etags...

OESA-2024-1228 fontforge security update

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: Splinefont in FontForge through 20230101 allows command...

SUSE CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

DEBIAN-CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

Command injection

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

UBUNTU-CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

PT-2024-1850

Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue exists due to the lack of neutralization of special elements in the software. This can allow an attacker to execute arbitrary commands via crafted filenames. The estimated number of...

FontForge Security Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A security vulnerability exists in FontForge 20230101 and earlier versions, which originates from allowing command injection via specially crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...