Medium ELSA-2020-1921 1 CVE

Moderate: fontforge security update (Oracle Linux 8)

Published May 5, 2020 · Updated May 5, 2020

Ecosystem: Oracle Linux

Summary

[20170731-14]
- Resolves:rh#1790974 - CVE-2020-5395:out-of-bounds write in sfd.c

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	fontforge	0:20170731-14.el8

Vulnerabilities 1

Unscored —

CVE-2020-5395

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

fontforge fontforge Debian Ubuntu

Jan 3, 2020