Red Hat Security AdvisoryRHSA-2020:3966
fontforge security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) fontforge-20120731b-13.el7, fontforge-devel-20120731b-13.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) fontforge-20120731b-13.el7, fontforge-devel-20120731b-13.el7
- Red Hat Enterprise Linux Server Optional (v. 7) fontforge-20120731b-13.el7, fontforge-20120731b-13.el7.ppc, fontforge-devel-20120731b-13.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) fontforge-20120731b-13.el7, fontforge-devel-20120731b-13.el7
Fixes 1 record
Priority MEDIUM 43
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02478 · Published 2020-01-03 · Partial fix CWE-416