Red Hat Security Advisory

RHSA-2020:1921

fontforge security update

Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2020-04441 CVE-2020-5395 · GHSA-hjq7-xwrq-jpwv

MEDIUM 43

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02478 Published 2020-01-03 Partial fix CWE-416