Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 7: MGASA-2020-0057 Critical: FontForge Buffer Overflow

mageia
Calendar Grey January 28, 2020
Dist Mageia Esm H88
Mageia has released enhanced FontForge packages that address significant security vulnerabilities reported on January 28, 2020.
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c (CVE-2020-5395) FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in...

Summary

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c (CVE-2020-5395)
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c (CVE-2020-5496)

References

- https://bugs.mageia.org/show_bug.cgi?id=26095

- - https://www.cve.org/CVERecord?id=CVE-2020-5395

- https://www.cve.org/CVERecord?id=CVE-2020-5496

Topics%20covered

Topics Covered

security advisory software update security fix heap overflow use-after-free fontforge Mageia

Resolution

SRPMS

- 7/core/fontforge-20190413-1.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 28 Jan 2020
URL: https://advisories.mageia.org/MGASA-2020-0057.html
Type: security
CVE: CVE-2020-5395, CVE-2020-5496

Topics%20covered

Topics Covered

security advisory software update security fix heap overflow use-after-free fontforge Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here