Debian: Security Advisory (DLA-3754-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3754-1] fontforge security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3754-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 08, 2024 https://wiki.debian.org/LTS -...

Debian dla-3754 : fontforge - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3754 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3754-1 [email protected]...

OESA-2024-1228 fontforge security update

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: Splinefont in FontForge through 20230101 allows command...

SUSE CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

SUSE CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

The vulnerability of the FontForge font editing software lies in its lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.

The vulnerability of the FontForge font editing software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the FontForge font editing software lies in its lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.

The vulnerability of the FontForge font editing software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

DEBIAN-CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

DEBIAN-CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

Command injection

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

UBUNTU-CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

UBUNTU-CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

Command injection

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...