Medium DSA-5641-1 2 CVEs

fontforge - security update

Published Mar 19, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 11	fontforge	1:20201107~dfsg-4+deb11u1
Debian · 12	fontforge	1:20230101~dfsg-1.1~deb12u1

Vulnerabilities 2

Medium 6.5

CVE-2024-25082 Public exploit

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.

fontforge fontforge fontforge-doc Debian Ubuntu Wolfi

Feb 26, 2024
Medium 4.2

CVE-2024-25081 Public exploit

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

fontforge fontforge fontforge-doc Debian Ubuntu Wolfi

Feb 26, 2024