831 matches found
Updated fontforge packages fix security vulnerabilities
FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c CVE-2020-5395 FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c CVE-2020-5496...
MGASA-2020-0057 Updated fontforge packages fix security vulnerabilities
FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c CVE-2020-5395 FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c CVE-2020-5496...
Fedora: Security Advisory for fontforge (FEDORA-2020-229ad63391)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE: Security Advisory for fontforge (openSUSE-SU-2020:0089_1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 31 : fontforge (2020-229ad63391)
Security fix for CVE-2020-5395:out-of-bounds write in sfd.c Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...
[SECURITY] Fedora 31 Update: fontforge-20190801-2.fc31
FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...
openSUSE Security Update : fontforge (openSUSE-2020-89)
This update for fontforge fixes the following issues : - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. This update was imported from the SUSE:SLE-15:Update update project. C Tenable...
OPENSUSE-SU-2020:0089-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. This update was imported from the SUSE:SLE-15:Update update project...
Security update for fontforge (moderate)
openSUSE Security Update: Security update for fontforge Announcement ID: openSUSE-SU-2020:0089-1 Rating: moderate References: 1160220 1160236 Cross-References: CVE-2020-5395 CVE-2020-5496 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...
SUSE SLED15 / SLES15 Security Update : fontforge (SUSE-SU-2020:0118-1)
This update for fontforge fixes the following issues : CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. Note that Tenable Network Security has extracted the preceding description block...
SUSE-SU-2020:0118-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236...
CVE-2020-5395
An out-of-bounds write was discovered in fontforge while parsing SFD files containing very large LayerCount tokens. The flaw allows an attacker to overwrite data before a buffer allocated on the heap, thus causing the application to crash or execute arbitrary code...
FontForge Resource Management Error Vulnerability
FontForge is an open source font editing tool that supports multiple languages. A resource management error vulnerability exists in the 'SFDGetFontMetaData' function of the sfd.c file in FontForge version 20190801. The vulnerability stems from mismanagement of system resources e.g., memory, disk...
FontForge buffer overflow vulnerability (CNVD-2020-01920)
FontForge is an open source font editing tool that supports multiple languages. A buffer overflow vulnerability exists in the 'Type2NotDefSplines' function of the splinesave.c file in FontForge version 20190801. The vulnerability stems from a networked system or product performing operations in...
CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
DEBIAN-CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
UBUNTU-CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
