UbuntuUpdates.org

Package "fontforge"

Name: fontforge

Description:

font editor
Latest version: 1:20230101~dfsg-1ubuntu0.1
Release: mantic (23.10)
Level: security
Repository: universe
Homepage: https://fontforge.github.io/en-US/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "fontforge"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "fontforge" in Mantic

Repository Area Version
base universe 1:20230101~dfsg-1build1
updates universe 1:20230101~dfsg-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:20230101~dfsg-1ubuntu0.1 2024-06-27 13:07:07 UTC

  fontforge (1:20230101~dfsg-1ubuntu0.1) mantic-security; urgency=medium

  * SECURITY UPDATE: Command Injection
    - debian/patches/CVE-2024-25081.patch: fixed a command injection via
      crafted filenames (CVE-2024-25081) and a command injection via crafted
      archives or compressed files (CVE-2024-25082)
    - CVE-2024-25081
    - CVE-2024-25082

 -- Amir Naseredini <email address hidden> Mon, 24 Jun 2024 15:24:03 +0100
CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
CVE-2024-25082 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.


About   -   Send Feedback to @ubuntu_updates