[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for fontforge issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Jan 1 20:15:24 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e4f8dd92 by Salvatore Bonaccorso at 2026-01-01T21:15:10+01:00
Add Debian bug reference for fontforge issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -545,40 +545,40 @@ CVE-2025-15356 (A vulnerability has been found in Tenda AC20 up to 16.03.08.12.
CVE-2025-15354 (A flaw has been found in itsourcecode Society Management System 1.0. T ...)
NOT-FOR-US: itsourcecode System
CVE-2025-15280 (FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulner ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1188/
CVE-2025-15279 (FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Co ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1184/
CVE-2025-15278 (FontForge GUtils XBM File Parsing Integer Overflow Remote Code Executi ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1185/
CVE-2025-15277 (FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Co ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1186/
CVE-2025-15276 (FontForge SFD File Parsing Deserialization of Untrusted Data Remote Co ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1187/
CVE-2025-15275 (FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Exec ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1189/
CVE-2025-15274 (FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Exec ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1190/
CVE-2025-15273 (FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Exe ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1191/
CVE-2025-15272 (FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Exec ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1192/
CVE-2025-15271 (FontForge SFD File Parsing Improper Validation of Array Index Remote C ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1193/
CVE-2025-15270 (FontForge SFD File Parsing Improper Validation of Array Index Remote C ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1194/
CVE-2025-15269 (FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulner ...)
- - fontforge <unfixed>
+ - fontforge <unfixed> (bug #1124487)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-25-1195/
CVE-2025-15223 (A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e5 ...)
NOT-FOR-US: Philipinho Simple-PHP-Blog
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4f8dd9276a95a7a30bd1b18f7e9f00f09befd89
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4f8dd9276a95a7a30bd1b18f7e9f00f09befd89
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260101/db8ff59d/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list