Summary
FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.
Security Fix(es):
* fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | fontforge | 20170731-15.el8 |
Vulnerabilities 2
-
Unscored —
An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certa…
-
Unscored —
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
References
-
report
https://vulners.com/cve/CVE-2020-25690