Most recent entries from all

ALSA-2020:4844 — Moderate: fontforge security update

Affected: AlmaLinux:8: fontforge

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

* fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

cnvd-2020-01919

EUVD-2026-36543

fkie_cve-2020-5395

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

GHSA-hjq7-xwrq-jpwv

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

gsd-2020-5395

openSUSE-SU-2020:0089-1 — Security update for fontforge

Security update for fontforge

SUSE-SU-2020:0393-1 — Security update for fontforge

Security update for fontforge

UBUNTU-CVE-2020-5395

Affected: Ubuntu:Pro:16.04:LTS: fontforge, Ubuntu:Pro:18.04:LTS: fontforge, Ubuntu:20.04:LTS: fontforge

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

WID-SEC-W-2024-0586 — Red Hat fontforge: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.