Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2019-2045

Высокий

ALT-PU-2019-2045: package fontforge update to version 20190413-alt1

Источник
errata.altlinux.org
Дата публикации
13.06.2019
Дата обновления
13.06.2019
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades fontforge to version 20190413-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 9 лет назад

uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17534.

CVSS3: 5.3
redhat
почти 9 лет назад

uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17534.

CVSS3: 8.8
nvd
почти 9 лет назад

uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17534.

CVSS3: 8.8
debian
почти 9 лет назад

uiutil.c in FontForge through 20170731 does not validate strings befor ...

suse-cvrf
больше 1 года назад

Security update for fontforge