Astra Linux - уязвимость в fontforge

Splinefont in FontForge, with a version number of 20230101, allows for command injection through crafted archives or compressed files...

Astra Linux - уязвимость в fontforge

Splinefont in FontForge, with a version number of 20230101, allows for command injection via crafted filenames...

fontforge: command injection via crafted filenames

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

fontforge: command injection via crafted filenames

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

fontforge: command injection via crafted filenames

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

MGASA-2024-0082 Updated fontforge packages fix security vulnerabilities

Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. CVE-2024-25082...

Medium: fontforge

Issue Overview: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. CVE-2024-25082 Affected Packages: fontforge Issue Correction: Run dnf...

Medium: fontforge

Issue Overview: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. CVE-2024-25082 Affected Packages: fontforge Note: This advisory is...

Amazon Linux 2 : fontforge (ALAS-2024-2495)

The version of fontforge installed on the remote host is prior to 20120731b-13. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2495 advisory. Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont ...

Medium: fontforge

Issue Overview: Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files. CVE-2024-25082 Affected Packages: fontforge Note: This advisory is...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : fontforge (SUSE-SU-2024:0864-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0864-1 advisory. - Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

OESA-2024-1228 fontforge security update

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: Splinefont in FontForge through 20230101 allows command...

SUSE CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

SUSE CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...