UbuntuUpdates.org

Package "libfontforge3"

Name: libfontforge3

Description:

font editor - runtime library
Latest version: 1:20190801~dfsg-4ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe
Head package: fontforge
Homepage: https://fontforge.github.io/en-US/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libfontforge3"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libfontforge3" in Focal

Repository Area Version
base universe 1:20190801~dfsg-4
updates universe 1:20190801~dfsg-4ubuntu0.1

Changelog

Version: 1:20190801~dfsg-4ubuntu0.1 2024-06-27 13:07:04 UTC

  fontforge (1:20190801~dfsg-4ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Command Injection
    - debian/patches/CVE-2024-25081.patch: fixed a command injection via
      crafted filenames (CVE-2024-25081) and a command injection via crafted
      archives or compressed files (CVE-2024-25082)
    - CVE-2024-25081
    - CVE-2024-25082

 -- Amir Naseredini <email address hidden> Tue, 25 Jun 2024 10:09:52 +0100
CVE-2024-25081 Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
CVE-2024-25082 Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.


About   -   Send Feedback to @ubuntu_updates