Описание
Security update for fontforge
This update for fontforge fixes the following issues:
- CVE-2024-25081: Fixed command injection via crafted filenames (bsc#1220404).
- CVE-2024-25082: Fixed command injection via crafted archives or compressed files (bsc#1220405).
Список пакетов
SUSE Linux Enterprise Software Development Kit 12 SP5
fontforge-20170731-11.17.1
Ссылки
- Link for SUSE-SU-2024:0863-1
- E-Mail link for SUSE-SU-2024:0863-1
- SUSE Security Ratings
- SUSE Bug 1220404
- SUSE Bug 1220405
- SUSE CVE CVE-2024-25081 page
- SUSE CVE CVE-2024-25082 page
Описание
Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:fontforge-20170731-11.17.1
Ссылки
- CVE-2024-25081
- SUSE Bug 1220404
Описание
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:fontforge-20170731-11.17.1
Ссылки
- CVE-2024-25082
- SUSE Bug 1220405