shield Security update for fontforge

SUSE-SLE-SDK-12-SP4-2019-2236

This update for fontforge fixes the following security issues: fontforge was updated to 20170731, fixings lots of bugs and security issues. - CVE-2017-11568: Heap-based buffer over-read in PSCharStringToSplines (bsc#1050161) - CVE-2017-11569: Heap-based buffer over-read in readttfcopyrights (bsc#1050181) - CVE-2017-11571: Stack-based buffer overflow in addnibble (bsc#1050185) - CVE-2017-11572: Heap-based buffer over-read in readcfftopdicts (bsc#1050187) - CVE-2017-11573: Over-read in ValidatePostScriptFontName (bsc#1050193) - CVE-2017-11574: Heap-based buffer overflow in readcffset (bsc#1050194) - CVE-2017-11575: Buffer over-read in strnmatch (bsc#1050195) - CVE-2017-11576: Ensure a positive size in a weight vector memcpycall in readcfftopdict (bsc#1050196) - CVE-2017-11577: Buffer over-read in getsid (bsc#1050200)

• Release Date
  Aug 28 2019
• References
  Bugzilla: 1050193, 1050181, 1050200, 1050161, 1050195, 1050194, 1050196, 1050187, 1050185
  CVEs: CVE-2017-11568, CVE-2017-11569, CVE-2017-11571, CVE-2017-11573, CVE-2017-11572, CVE-2017-11575, CVE-2017-11574, CVE-2017-11577, CVE-2017-11576
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  fontforge
  A Font Editor

  20170731-11.8.1

  lock rpm

  lock src

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  fontforge
  A Font Editor

  20170731-11.8.1

  lock rpm

  lock src

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  fontforge
  A Font Editor

  20170731-11.8.1

  lock rpm

  lock src

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  fontforge
  A Font Editor

  20170731-11.8.1

  lock rpm

  lock src