Description
FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 12 | | =1:20230101~dfsg-1 || =1:20230101~dfsg-1.1 || =1:20230101~dfsg-1.1~deb12u1 || =1:20230101~dfsg-2 || =1:20230101~dfsg-3 || =1:20230101~dfsg-4 || =1:20230101~dfsg-5 || =1:20230101~dfsg-6 || =1:20230101~dfsg-7 || =1:20230101~dfsg-8 |
 debian 11 | | =1:20201107~dfsg-4 || =1:20201107~dfsg-4+deb11u1 || =1:20220308~dfsg-1 || =1:20230101~dfsg-1 || =1:20230101~dfsg-1.1 || =1:20230101~dfsg-1.1~deb12u1 || =1:20230101~dfsg-2 || =1:20230101~dfsg-3 || =1:20230101~dfsg-4 || =1:20230101~dfsg-5 || =1:20230101~dfsg-6 || =1:20230101~dfsg-7 || =1:20230101~dfsg-8 |
 debian 14 | | =1:20230101~dfsg-4 || =1:20230101~dfsg-5 || =1:20230101~dfsg-6 || =1:20230101~dfsg-7 || =1:20230101~dfsg-8 |
 debian 13 | | =1:20230101~dfsg-4 || =1:20230101~dfsg-5 || =1:20230101~dfsg-6 || =1:20230101~dfsg-7 || =1:20230101~dfsg-8 |
 rpm rhel7 | | - |
 rpm rhel6 | | - |