EUVD-2017-3187

Malware in sbrugna...

EUVD-2017-3186

Malware in sbrugna...

EUVD-2017-3189

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-5496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c. CVE-2020-5496 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2020-5395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c. CVE-2020-5395 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2020-25690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...

GLSA-202508-03 : FontForge: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202508-03 FontForge: Arbitrary Code Execution A vulnerabilitiy has been discovered in FontForge. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from t...

FontForge: Arbitrary Code Execution

Background FontForge is a PostScript font editor and converter. Description A vulnerabilitiy has been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...

TencentOS Server 3: fontforge (TSSA-2024:0319)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0319 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Alibaba Cloud Linux 3 : 0285: fontforge (ALINUX3-SA-2024:0285)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0285 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-25081: Splinefont in FontForge...

RockyLinux 8 : fontforge (RLSA-2024:4267)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4267 advisory. fontforge: command injection via crafted filenames CVE-2024-25081 fontforge: command injection via crafted archives or compressed files CVE-2024-25082...

openSUSE Security Advisory (SUSE-SU-2025:1199-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : fontforge (SUSE-SU-2025:1199-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1199-1 advisory. - CVE-2017-17521: Fixed command injection in help function uiutil.c bsc1073014 Tenable has extracted the...

Security update for fontforge

This update for fontforge fixes the following issues: CVE-2017-17521: Fixed command injection in help function uiutil.c bsc1073014 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2025:1199-1 Security update for fontforge

This update for fontforge fixes the following issues: - CVE-2017-17521: Fixed command injection in help function uiutil.c bsc1073014...

fontforge-20230101-6.1 on GA media (moderate)

fontforge-20230101-6.1 on GA media Announcement ID: openSUSE-SU-2025:14981-1 Rating: moderate Cross-References: CVE-2017-17521 CVSS scores: CVE-2017-17521 SUSE : 5.9 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...

OPENSUSE-SU-2025:14981-1 fontforge-20230101-6.1 on GA media

These are all security issues fixed in the fontforge-20230101-6.1 package on the GA media of openSUSE Tumbleweed...

RockyLinux 9 : fontforge (RLSA-2024:9439)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9439 advisory. fontforge: command injection via crafted archives or compressed files CVE-2024-25082 fontforge: command injection via crafted filenames CVE-2024-25081...

RLSA-2024:9439 Moderate: fontforge security update

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: fontforge: command injection via crafted archives or compressed files...

fontforge security update

An update is available for fontforge. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FontForge is a font editor for outline and bitmap fonts. It supports a rang...