914 matches found
SUSE-SU-2024:0863-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2024-25081: Fixed command injection via crafted filenames bsc1220404. - CVE-2024-25082: Fixed command injection via crafted archives or compressed files bsc1220405...
Debian: Security Advisory (DLA-3754-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-3754-1 fontforge - security update
Bulletin has no description...
[SECURITY] [DLA 3754-1] fontforge security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3754-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 08, 2024 https://wiki.debian.org/LTS -...
Debian dla-3754 : fontforge - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3754 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3754-1 [email protected]...
OESA-2024-1228 fontforge security update
FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: Splinefont in FontForge through 20230101 allows command...
SUSE CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
SUSE CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
The vulnerability of the FontForge font editing software lies in its lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.
The vulnerability of the FontForge font editing software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the FontForge font editing software lies in its lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.
The vulnerability of the FontForge font editing software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
DEBIAN-CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
DEBIAN-CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
