SUSE-SU-2019:2236-1

Dashboard / Vulnerabilities / SUSE-SU-2019:2236-1

SUSE-SU-2019:2236-1

Summary: Security update for fontforge

Details: This update for fontforge fixes the following security issues: fontforge was updated to 20170731, fixings lots of bugs and security issues. - CVE-2017-11568: Heap-based buffer over-read in PSCharStringToSplines (bsc#1050161) - CVE-2017-11569: Heap-based buffer over-read in readttfcopyrights (bsc#1050181) - CVE-2017-11571: Stack-based buffer overflow in addnibble (bsc#1050185) - CVE-2017-11572: Heap-based buffer over-read in readcfftopdicts (bsc#1050187) - CVE-2017-11573: Over-read in ValidatePostScriptFontName (bsc#1050193) - CVE-2017-11574: Heap-based buffer overflow in readcffset (bsc#1050194) - CVE-2017-11575: Buffer over-read in strnmatch (bsc#1050195) - CVE-2017-11576: Ensure a positive size in a weight vector memcpycall in readcfftopdict (bsc#1050196) - CVE-2017-11577: Buffer over-read in getsid (bsc#1050200)

References: https://www.suse.com/support/update/announcement/2019/suse-su-20192236-1/, https://bugzilla.suse.com/1050161, https://bugzilla.suse.com/1050181, https://bugzilla.suse.com/1050185, https://bugzilla.suse.com/1050187, https://bugzilla.suse.com/1050193, https://bugzilla.suse.com/1050194, https://bugzilla.suse.com/1050195, https://bugzilla.suse.com/1050196, https://bugzilla.suse.com/1050200, https://www.suse.com/security/cve/CVE-2017-11568, https://www.suse.com/security/cve/CVE-2017-11569, https://www.suse.com/security/cve/CVE-2017-11571, https://www.suse.com/security/cve/CVE-2017-11572, https://www.suse.com/security/cve/CVE-2017-11573, https://www.suse.com/security/cve/CVE-2017-11574, https://www.suse.com/security/cve/CVE-2017-11575, https://www.suse.com/security/cve/CVE-2017-11576, https://www.suse.com/security/cve/CVE-2017-11577