885 matches found
fontforge.10959.n7.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184710 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
fontforge security update
20170731-14 - Resolves:rh1790974 - CVE-2020-5395:out-of-bounds write in sfd.c...
GLSA-202004-14 : FontForge: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202004-14 FontForge: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a...
FontForge: Multiple vulnerabilities
Background FontForge is a PostScript font editor and converter. Description Multiple vulnerabilities have been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted font using FontForge,...
RHEL 8 : fontforge (RHSA-2020:1921)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1921 advisory. FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type...
Moderate: Red Hat Security Advisory: fontforge security update
An update for fontforge is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
fontforge: out-of-bounds write in SFD_GetFontMetaData function in sfd.c
An out-of-bounds write was discovered in fontforge while parsing SFD files containing very large LayerCount tokens. The flaw allows an attacker to overwrite data before a buffer allocated on the heap, thus causing the application to crash or execute arbitrary code...
CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
Fedora 31 : fontforge (2020-906ee5b38d)
another fix for rh1790042 - CVE-2020-5395:out-of-bounds write in sfd.c Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...
Fedora: Security Advisory for fontforge (FEDORA-2020-906ee5b38d)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 31 Update: fontforge-20190801-6.fc31
FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...
SUSE-SU-2020:0393-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236...
Updated fontforge packages fix security vulnerabilities
FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c CVE-2020-5395 FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c CVE-2020-5496...
MGASA-2020-0057 Updated fontforge packages fix security vulnerabilities
FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c CVE-2020-5395 FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c CVE-2020-5496...
openSUSE: Security Advisory for fontforge (openSUSE-SU-2020:0089_1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for fontforge (FEDORA-2020-229ad63391)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 31 : fontforge (2020-229ad63391)
Security fix for CVE-2020-5395:out-of-bounds write in sfd.c Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...
[SECURITY] Fedora 31 Update: fontforge-20190801-2.fc31
FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...
openSUSE Security Update : fontforge (openSUSE-2020-89)
This update for fontforge fixes the following issues : - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. This update was imported from the SUSE:SLE-15:Update update project. C Tenable...
OPENSUSE-SU-2020:0089-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. This update was imported from the SUSE:SLE-15:Update update project...