[Git][security-tracker-team/security-tracker][master] Update status on CVE-2017-11573/fontforge

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
945f2241 by Salvatore Bonaccorso at 2026-08-10T07:56:02+02:00
Update status on CVE-2017-11573/fontforge

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -790146,8 +790146,9 @@ CVE-2017-11574 (FontForge 20161012 is vulnerable to a heap-based buffer overflow
 	NOTE: https://github.com/fontforge/fontforge/issues/3090
 	NOTE: https://github.com/fontforge/fontforge/commit/62b6433a81ee7ed6e0ac2d6b09ac85b885046ac3
 CVE-2017-11573 (FontForge 20161012 is vulnerable to a buffer over-read in ValidatePost ...)
-	- fontforge <unfixed> (unimportant; bug #873588)
+	- fontforge 1:20190801~dfsg-2 (unimportant; bug #873588)
 	NOTE: https://github.com/fontforge/fontforge/issues/3098
+	NOTE: Fixed by: https://github.com/fontforge/fontforge/commit/2d27e3d283213614145767292672877067113a4a (20190317)
 	NOTE: Crash in GUI tool/related desktop libs, no security impact
 CVE-2017-11572 (FontForge 20161012 is vulnerable to a heap-based buffer over-read in r ...)
 	{DSA-3958-1 DLA-1065-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/945f2241d6f264a2c4bba3dd0061e6b0bb8db2b9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/945f2241d6f264a2c4bba3dd0061e6b0bb8db2b9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260810/031b1cd1/attachment.htm>