Description:
FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.
Security Fix(es):
* fontforge: command injection via crafted archives or compressed files (CVE-2024-25082)
* fontforge: command injection via crafted filenames (CVE-2024-25081)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
fontforge-20201107-6.el9.aarch64.rpm |
d66c8ff824d5c7d8a6a928435a0b417625a515339a9e615d6d057ac7f3a91f7d |
i686 |
fontforge-20201107-6.el9.i686.rpm |
702d5256b986bd6bd7e3d7326779d2a2e9f7b7e2fb9421d55e0d0023fa08183b |
ppc64le |
fontforge-20201107-6.el9.ppc64le.rpm |
9fe1327a8bbcfe2e032d7ed2be50364aaa49a95a4e672c19e9c66b94147d21ad |
s390x |
fontforge-20201107-6.el9.s390x.rpm |
f282e4142f9e64540475d754ae3bed76845a102c5ab8e20dbf6b7044ba05e645 |
x86_64 |
fontforge-20201107-6.el9.x86_64.rpm |
d0d77f39a1f2dfdb55076a7b0fd0e897b83b65d0ff41f2683e85bb881aeeffe2 |