ALSA-2024:4267 Moderate: fontforge security update

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: fontforge: command injection via crafted filenames CVE-2024-25081...

Ubuntu: Security Advisory (USN-6856-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in font_stack (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6921 Malicious code in font_stack (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in font_league (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in font_awesome-sassc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6916 Malicious code in font_awesome-sass-mixins (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6917 Malicious code in font_awesome-sassc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6914 Malicious code in font_awesome-sass (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6915 Malicious code in font_awesome-sass-c (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in font-assets (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6913 Malicious code in font-assets (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5307 Malicious code in letters-font (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in letters-font (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Ghostscript vulnerabilities (USN-6835-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6835-1 advisory. It was discovered that Ghostscript did not properly restrict eexec seeds to those specified by the Type 1 Font Format...

CVE-2024-4863

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘titleFont’ parameter in all versions up to, and including, 3.2.38 due to insufficient input sanitization and output escaping. This makes it possible for...

Important: firefox

Issue Overview: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. CVE-2024-4367 If the browser.privatebrowsing.autostart preference is...

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...