UbuntuUpdates.org

Package "fontforge"

Name: fontforge

Description:

font editor
Latest version: 1:20190801~dfsg-4ubuntu0.1
Release: focal (20.04)
Level: updates
Repository: universe
Homepage: https://fontforge.github.io/en-US/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "fontforge"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "fontforge" in Focal

Repository Area Version
base universe 1:20190801~dfsg-4
security universe 1:20190801~dfsg-4ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:20190801~dfsg-4ubuntu0.1 2024-06-27 15:07:08 UTC

  fontforge (1:20190801~dfsg-4ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Command Injection
    - debian/patches/CVE-2024-25081.patch: fixed a command injection via
      crafted filenames (CVE-2024-25081) and a command injection via crafted
      archives or compressed files (CVE-2024-25082)
    - CVE-2024-25081
    - CVE-2024-25082

 -- Amir Naseredini <email address hidden> Tue, 25 Jun 2024 10:09:52 +0100
CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
CVE-2024-25082 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.


About   -   Send Feedback to @ubuntu_updates