Medium ELSA-2024-9439 2 CVEs

Moderate: fontforge security update (Oracle Linux 9)

Published Nov 14, 2024 · Updated Nov 14, 2024

Ecosystem: Oracle Linux

Summary

[20201107-6]
- Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	fontforge	0:20201107-6.el9

Vulnerabilities 2

Medium 6.5

CVE-2024-25082 Public exploit

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.

fontforge fontforge fontforge-doc Debian Ubuntu Wolfi

Feb 26, 2024
Medium 4.2

CVE-2024-25081 Public exploit

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

fontforge fontforge fontforge-doc Debian Ubuntu Wolfi

Feb 26, 2024