CVE-2024-25082

Published: 26 February 2024

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.

Priority

Package	Release	Status
fontforge Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	jammy	Needs triage
	mantic	Needs triage
	noble	Needs triage
	trusty	Ignored (end of standard support)
	upstream	Needs triage
	xenial	Needs triage

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.