{"id":"CVE-2025-50949","aliases":["DEBIAN-CVE-2025-50949","EUVD-2025-35700","GHSA-hw5f-q2pp-q95m","OESA-2025-2601","OESA-2025-2602","OESA-2025-2603","OESA-2025-2604","OESA-2025-2605","OESA-2025-2643","SUSE-SU-2025:4353-1","SUSE-SU-2026:20016-1","SUSE-SU-2026:20435-1","UBUNTU-CVE-2025-50949","openSUSE-SU-2025:15758-1","openSUSE-SU-2025:20174-1","openSUSE-SU-2026:20235-1"],"status":"published","title":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","description":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0026,"percentile":0.17924,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2025-10-23T00:00:00Z","modified":"2026-11-03T21:00:06Z","fixes":[{"ecosystem":"Debian:14","package":"fontforge","fixed_in":["1:20251009+git20260808~dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"fontforge","fixed_in":["20200314-9.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"fontforge","fixed_in":["20200314-9.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"fontforge","fixed_in":["20230101-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"fontforge","fixed_in":["20230101-4.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"fontforge","fixed_in":["20200314-6.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"fontforge","fixed_in":["20230101-4.oe2403"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"fontforge","fixed_in":["20200314-150200.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"fontforge","fixed_in":["20200314-150200.3.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"fontforge","fixed_in":["20200314-150200.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"fontforge","fixed_in":["20230101-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"fontforge","fixed_in":["20230101-160000.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"fontforge","fixed_in":["20251009-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"fontforge","fixed_in":["20230101-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20230101~dfsg-1","1:20230101~dfsg-1.1","1:20230101~dfsg-1.1~deb12u1","1:20230101~dfsg-2","1:20230101~dfsg-3","1:20230101~dfsg-4","1:20230101~dfsg-5","1:20230101~dfsg-6","1:20230101~dfsg-7","1:20230101~dfsg-8","1:20230101~dfsg-9","1:20251009+git20260808~dfsg-1","1:20251009+git20260808~dfsg-2","1:20251009+git20260808~dfsg-3"]},{"source":"osv","ecosystem":"Debian:13","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20230101~dfsg-4","1:20230101~dfsg-5","1:20230101~dfsg-6","1:20230101~dfsg-7","1:20230101~dfsg-8","1:20230101~dfsg-9","1:20251009+git20260808~dfsg-1","1:20251009+git20260808~dfsg-2","1:20251009+git20260808~dfsg-3"]},{"source":"osv","ecosystem":"Debian:14","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20251009+git20260808~dfsg-1"}]}],"versions":["1:20230101~dfsg-4","1:20230101~dfsg-5","1:20230101~dfsg-6","1:20230101~dfsg-7","1:20230101~dfsg-8","1:20230101~dfsg-9"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200314-9.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200314-9.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230101-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230101-4.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200314-6.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230101-4.oe2403"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200314-150200.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200314-150200.3.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20200314-150200.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230101-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230101-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20251009-160000.1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20251009-160000.1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20120731.b-5","20120731.b-5ubuntu1","20120731.b-7.1","20120731.b-7.1ubuntu0.1","20120731.b-7.1ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20161005~dfsg-4+deb9u1ubuntu1","1:20170731~dfsg-1","1:20170731~dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20170731~dfsg-1build1","1:20170731~dfsg-2","1:20190801~dfsg-2","1:20190801~dfsg-2ubuntu1","1:20190801~dfsg-4","1:20190801~dfsg-4ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20201107~dfsg-4","1:20201107~dfsg-4build1","1:20201107~dfsg-4+deb11u1build0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20230101~dfsg-1build1","1:20230101~dfsg-1build2","1:20230101~dfsg-1.1","1:20230101~dfsg-1.1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20230101~dfsg-4build1","1:20230101~dfsg-4build2","1:20230101~dfsg-7","1:20230101~dfsg-8"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20230101~dfsg-8build1","1:20230101~dfsg-9","1:20251009+git20260808~dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:20230101~dfsg-8","1:20230101~dfsg-8build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20251009-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230101-160000.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"fontforge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20251009-160000.1.1"}]}],"bundled":4}],"products":[{"vendor":"fontforge","product":"fontforge"}],"references":[{"url":"https://github.com/fontforge/fontforge/pull/5491","tags":["Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50949","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hw5f-q2pp-q95m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-50949","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2601","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2602","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2603","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2604","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2605","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2643","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254353-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1252652","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50949","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620016-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620435-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1256013","tags":["report"]},{"url":"https://bugzilla.suse.com/1256025","tags":["report"]},{"url":"https://bugzilla.suse.com/1256032","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15279","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-50949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-50949","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-50949","description":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","status":"published","published":"2025-10-23T00:00:00Z","modified":"2025-10-24T12:55:22.98Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:32:52.526476Z"}],"euvd":[{"id":"EUVD-2025-35700","description":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","status":"published","published":"2025-10-23T00:00:00Z","modified":"2025-10-24T12:55:22Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:37.862275Z"}],"ghsa":[{"id":"GHSA-hw5f-q2pp-q95m","title":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","description":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","status":"published","published":"2025-10-23T18:31:14Z","modified":"2025-10-24T15:32:30Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T15:04:12.620224Z"}],"nvd":[{"id":"CVE-2025-50949","description":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","status":"published","published":"2025-10-23T16:15:49.517Z","modified":"2026-10-27T12:10:00.343Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:11:39.579859Z"}],"osv":[{"id":"CVE-2025-50949","description":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","status":"published","published":"2025-10-23T16:15:49.517Z","modified":"2026-04-10T05:29:17.587621Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"DEBIAN-CVE-2025-50949","description":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","status":"published","published":"2025-10-23T16:15:49.517Z","modified":"2026-11-03T21:00:06.192951181Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T21:05:16.218603Z"},{"id":"OESA-2025-2601","title":"fontforge security update","description":"FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.\r\n\r\nSecurity Fix(es):\n\nFontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)","status":"published","published":"2025-10-31T11:09:43Z","modified":"2026-08-18T01:19:18.056680632Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2602","title":"fontforge security update","description":"FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.\r\n\r\nSecurity Fix(es):\n\nFontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)","status":"published","published":"2025-10-31T11:09:43Z","modified":"2026-08-18T01:19:17.599598968Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2603","title":"fontforge security update","description":"FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.\r\n\r\nSecurity Fix(es):\n\nFontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)","status":"published","published":"2025-10-31T11:09:43Z","modified":"2026-08-18T01:19:17.685986576Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2604","title":"fontforge security update","description":"FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.\r\n\r\nSecurity Fix(es):\n\nFontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)","status":"published","published":"2025-10-31T11:09:43Z","modified":"2026-08-18T01:19:18.122677539Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2605","title":"fontforge security update","description":"FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.\r\n\r\nSecurity Fix(es):\n\nFontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)","status":"published","published":"2025-10-31T11:09:43Z","modified":"2026-08-18T01:19:17.786681515Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2643","title":"fontforge security update","description":"FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.\r\n\r\nSecurity Fix(es):\n\nFontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)","status":"published","published":"2025-11-07T11:09:46Z","modified":"2026-08-18T01:19:18.858946285Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"UBUNTU-CVE-2025-50949","description":"FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.","status":"published","published":"2025-10-23T16:15:00Z","modified":"2026-10-17T12:57:05.843088006Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"openSUSE-SU-2025:15758-1","title":"fontforge-20251009-2.1 on GA media","description":"These are all security issues fixed in the fontforge-20251009-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-24T00:00:00Z","modified":"2026-03-23T04:54:09.978157Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20174-1","title":"Security update for fontforge","description":"This update for fontforge fixes the following issues:\n\n- CVE-2025-50949: Fixed memory leak in function DlgCreate8 (bsc#1252652).\n","status":"published","published":"2025-12-22T10:04:31Z","modified":"2026-03-23T04:54:19.318695Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20235-1","title":"Security update for fontforge","description":"This update for fontforge fixes the following issues:\n\nUpdate to version 20251009.\n\nSecurity issues fixed:\n\n- CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing (bsc#1256013).\n- CVE-2025-15269: remote code execution via use-after-free in SFD file parsing (bsc#1256032).\n- CVE-2025-15275: arbitrary code execution via SFD file parsing buffer overflow (bsc#1256025).\n- CVE-2025-50949: memory leak in function DlgCreate8 (bsc#1252652).\n\nOther updates and bugfixes:\n\n- fix multiple crashes in Multiple Masters.\n- fix crash for content over 32767 characters in GDraw multiline text field.\n- fix crash on Up/Down\n- fix crash in Metrics View.\n- fix UFO crash for empty contours.\n- fix crash issue in allmarkglyphs.\n\n- Version update to 20251009:\n\n  * Update documentation for py scripts (#5180)\n  * Update GitHub CI runners (#5328)\n  * Update po files from Croudin sources. (#5330)\n  * Use consistent Python in MacOS GitHub runner (#5331)\n  * Fix CI for Windows GitHub runner (#5335)\n  * Fix lookup flags parsing (#5338)\n  * Fixes (#5332): glyph file names uXXXXX (#5333)\n  * make harmonization robust and avoid zero handles after harmonization (#5262)\n  * Quiet strict prototypes warnings. (#5313)\n  * Fix crash in parsegvar() due to insufficient buffer (#5339)\n  * Handle failed iconv conversion. Unhandled execution path was UB, causing a segfault for me (#5329)\n  * Fix CMake function _get_git_version() (#5342)\n  * Don't require individual tuple encapsulation in fontforge.font.bitmapSizes setter (#5138)\n  * nltransform of anchor points (#5345)\n  * Fix generateFontPostHook being called instead of generateFontPreHook (#5226)\n  * Always set usDefaultChar to 0 (.notdef) (#5242)\n  * add font attributes, method to Python docs (#5353)\n  * fix segfault triggered by Python del c[i:j] (#5352)\n  * Autoselect internal WOFF2 format (#5346)\n  * Fix typos in the FAQ (#5355)\n  * add font.style_set_names attribute to Python API (#5354)\n  * Bulk tester (#5365)\n  * Fix Splinefont shell invocation (#5367)\n  * Fix the lists of Windows language IDs (#5359)\n  * Support suplementary planes in SFD (emojis etc.) (#5364)\n  * Remove psaltnames for multi-code-point names (#5305)\n  * doc: added missing sudo to installation instructions (#5300)\n  * Fix data corruption on SFD reading (#5380)\n  * Compare vertical metrics check when generating TTC (#5372)\n  * Treat FT_PIXEL_MODE_MONO as 2 grey levels (#5379)\n  * Don't attempt to copy anchors into NULL font (#5405)\n  * Fix export of supplementary plane characters in font name to TTF (#5396)\n  * Defer crowdin update to the end of the pipeline (#5409)\n  * Fix generated feature file bugs (#5384)\n  * crowdin: update to java 17 (#5447)\n  * Remove assert from Python script processor (#5410)\n  * Use sysconfig for Python module locations (#5423)\n  * Use PyConfig API on Python 3.8 (#5404)\n  * Fix resource leak in unParseTTInstrs (#5476)\n  * Only install GUI-specific files if ENABLE_GUI is set (#5451)\n  * add math device tables to Python API (#5348)\n  * Update CI runner to macOS 13 (#5482)\n  * Allow hyphen and special characters in Feature File glyph names (#5358)\n  * Fix Python font.appendSFNTName() function (#5494)\n  * Update mm.c (#5386)\n  * Warning rollup (probably some hidden bugs!) from clang trunk (#5492)\n  * Fix function PyFFFont_addSmallCaps. (#5519)\n  * Make SmallCaps() create symbols (#5517)\n  * Segfault fix and complete implementation of \"Don't generate FFTM tables\" (#5509)\n  * Modernize fixed pitch flag computation (#5506)\n  * fix memleak in function utf7toutf8_copy (#5495)\n  * Avoid crashes in Python scripts when objects are accessed in invalid state (#5483)\n  * Fix CI for Ubuntu 24 (#5531)\n  * Bump GitHub CI runner to Ubuntu 22 (#5551)\n  * Fix memory corruption in SFUnicodeRanges() (#5537)\n  * Add contour draw option to H.Metrics. (#5496)\n  * Fix scaling of references in CharView (#5558)\n  * Fix TTF validation on load for fixed pitch fonts (#5562)\n  * Performance fixes for GSUB/GPOS dumps (#5547)\n  * Simple GTK-based dialog with CSS appearance support (#5546)\n  * Support Harfbuzz in Metrics View (#5522)\n  * Update po files from crowdin translations (#5575)\n  * Be more clever about label text in gtextfield (#5583)\n  * Add minimal support for GDEF version 1.3 (#5584)\n  * Sanitize messages from python (#5589)\n  * Fix a crash caused by deleting a glyph with vertical kerning pairs. (#5592)\n  * THEME -\u003e GUI_THEME (#5596)\n  * Update po translations from Crowdin (#5593)\n  * Upgrade to Unicode 16.0.0 (#5594)\n  * Fix Linux AppImage (#5599)\n  * Upgrade to Unicode 17.0.0 and extend the language and script lists (#5618)\n  * Remove X11 and non-Cairo drawing backends (#5612)\n  * Add macOS dependency setup script (#5563)\n  * Fix hotkeys in BitmapView (#5626)\n  * Manually install Inno Setup 6 (#5621)\n  * Remove cv-\u003eback_img_out_of_date and cv-\u003ebackimgs (#5625)\n  * fix spelling \"bt\" -\u003e \"but\" (#5636)\n  * Fix typos in Python module docs (#5634)\n\n- Version update to 20230101+git59.770356c9b:\n\n  * Add contour draw option to H.Metrics. (#5496)\n  * Fix memory corruption in SFUnicodeRanges() (#5537)\n  * Bump GitHub CI runner to Ubuntu 22 (#5551)\n  * Fix CI for Ubuntu 24 (#5531)\n  * Avoid crashes in Python scripts when objects are accessed in\n    invalid state (#5483)\n  * fix memleak in function utf7toutf8_copy (#5495)\n  * Modernize fixed pitch flag computation (#5506)\n  * Segfault fix and complete implementation of \"Don't generate\n    FFTM tables\" (#5509)\n  * Make SmallCaps() translate symbols, too.  Update\n    documentation accordingly. (#5517)\n  * Fix function PyFFFont_addSmallCaps. (#5519)\n  * Warning rollup (probably some hidden bugs!) from clang trunk\n    (#5492)\n  * Update mm.c (#5386)\n  * fix memleak in function DlgCreate8 (#5491)\n  * Fix Python font.appendSFNTName() function (#5494)\n  * Allow hyphen and special characters in Feature File glyph names\n    (#5358)\n  * Update CI runner to macOS 13 (#5482)\n  * add math device tables to Python API (#5348)\n  * Only install GUI-specific files if ENABLE_GUI is set (#5451)\n  * Fix resource leak in unParseTTInstrs (#5476)\n  * Use PyConfig API on Python 3.8 (#5404)\n  * Use sysconfig for Python module locations (#5423)\n  * More crowdin fix\n  * Python script shall trigger no asserts (#5410)\n  * crowdin: update to java 17 (#5447)\n  * try fix crowdin\n  * Fix generated feature file bugs (#5384)\n  * Defer crowdin update to the end of the pipeline (#5409)\n  * Fix export of supplementary plane characters in font name to\n    TTF (#5396)\n  * Don't attempt to copy anchors into NULL font (#5405)\n  * Treat FT_PIXEL_MODE_MONO as 2 grey levels (#5379)\n  * Compare vertical metrics check when generating TTC (#5372)\n  * Fix data corruption on SFD reading (#5380)\n  * doc: added missing sudo to installation instructions (#5300)\n  * Remove `psaltnames` for multi-code-point names (#5305)\n  * Support suplementary planes in SFD (emojis etc.) (#5364)\n  * Fix the lists of Windows language IDs (#5359)\n  * fix splinefont shell command injection (#5367)\n  * Bulk tester (#5365)\n  * add `font.style_set_names` attribute to Python API (#5354)\n  * Fix typos in the FAQ (#5355)\n  * Autoselect internal WOFF2 format (#5346)\n  * fix segfault triggered by Python `del c[i:j]` (#5352)\n  * add `font` attributes, method to Python docs (#5353)\n  * Always set `usDefaultChar` to 0 (.notdef) (#5242)\n  * Fix generateFontPostHook being called instead of\n    generateFontPreHook (#5226)\n  * nltransform of anchor points (#5345)\n  * Don't require individual tuple encapsulation in\n    fontforge.font.bitmapSizes setter (#5138)\n  * Fix CMake function _get_git_version() (#5342)\n  * Handle failed iconv conversion. Unhandled execution path was\n    UB, causing a segfault for me (#5329)\n  * Fix crash in parsegvar() due to insufficient buffer (#5339)\n  * Quiet strict prototypes warnings. (#5313)\n  * harmonizing can now no longer produce zero handles, the\n    computation of harmonization is now numerically robust (#5262)\n  * Fix glyph file names uXXXXX (#5333)\n  * Fix lookup flags parsing (#5338)\n  * Duplicate libfontforge.dll for \"py\" and \"pyhook\" tests. (#5335)\n  * Use consistent Python in MacOS GitHub runner (#5331)\n  * Update po files from Croudin sources after fixing problems\n  * Fix GinHub CI runners (#5328)\n","status":"published","published":"2026-02-14T21:30:01Z","modified":"2026-03-23T04:54:48.338181Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:4353-1","title":"Security update for fontforge","description":"This update for fontforge fixes the following issues:\n\n- CVE-2025-50949: Fixed a memory leak in the DlgCreate8 function. (bsc#1252652)\n","status":"published","published":"2025-12-10T18:03:31Z","modified":"2026-02-04T04:01:46.156816Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2026:20016-1","title":"Security update for fontforge","description":"This update for fontforge fixes the following issues:\n\n- CVE-2025-50949: Fixed memory leak in function DlgCreate8 (bsc#1252652).\n","status":"published","published":"2025-12-22T10:05:05Z","modified":"2026-03-23T04:52:29.278919Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20435-1","title":"Security update for fontforge","description":"This update for fontforge fixes the following issues:\n\nUpdate to version 20251009.\n\nSecurity issues fixed:\n\n- CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing (bsc#1256013).\n- CVE-2025-15269: remote code execution via use-after-free in SFD file parsing (bsc#1256032).\n- CVE-2025-15275: arbitrary code execution via SFD file parsing buffer overflow (bsc#1256025).\n- CVE-2025-50949: memory leak in function DlgCreate8 (bsc#1252652).\n\nOther updates and bugfixes:\n\n- fix multiple crashes in Multiple Masters.\n- fix crash for content over 32767 characters in GDraw multiline text field.\n- fix crash on Up/Down\n- fix crash in Metrics View.\n- fix UFO crash for empty contours.\n- fix crash issue in allmarkglyphs.\n\n- Version update to 20251009:\n\n  * Update documentation for py scripts (#5180)\n  * Update GitHub CI runners (#5328)\n  * Update po files from Croudin sources. (#5330)\n  * Use consistent Python in MacOS GitHub runner (#5331)\n  * Fix CI for Windows GitHub runner (#5335)\n  * Fix lookup flags parsing (#5338)\n  * Fixes (#5332): glyph file names uXXXXX (#5333)\n  * make harmonization robust and avoid zero handles after harmonization (#5262)\n  * Quiet strict prototypes warnings. (#5313)\n  * Fix crash in parsegvar() due to insufficient buffer (#5339)\n  * Handle failed iconv conversion. Unhandled execution path was UB, causing a segfault for me (#5329)\n  * Fix CMake function _get_git_version() (#5342)\n  * Don't require individual tuple encapsulation in fontforge.font.bitmapSizes setter (#5138)\n  * nltransform of anchor points (#5345)\n  * Fix generateFontPostHook being called instead of generateFontPreHook (#5226)\n  * Always set usDefaultChar to 0 (.notdef) (#5242)\n  * add font attributes, method to Python docs (#5353)\n  * fix segfault triggered by Python del c[i:j] (#5352)\n  * Autoselect internal WOFF2 format (#5346)\n  * Fix typos in the FAQ (#5355)\n  * add font.style_set_names attribute to Python API (#5354)\n  * Bulk tester (#5365)\n  * Fix Splinefont shell invocation (#5367)\n  * Fix the lists of Windows language IDs (#5359)\n  * Support suplementary planes in SFD (emojis etc.) (#5364)\n  * Remove psaltnames for multi-code-point names (#5305)\n  * doc: added missing sudo to installation instructions (#5300)\n  * Fix data corruption on SFD reading (#5380)\n  * Compare vertical metrics check when generating TTC (#5372)\n  * Treat FT_PIXEL_MODE_MONO as 2 grey levels (#5379)\n  * Don't attempt to copy anchors into NULL font (#5405)\n  * Fix export of supplementary plane characters in font name to TTF (#5396)\n  * Defer crowdin update to the end of the pipeline (#5409)\n  * Fix generated feature file bugs (#5384)\n  * crowdin: update to java 17 (#5447)\n  * Remove assert from Python script processor (#5410)\n  * Use sysconfig for Python module locations (#5423)\n  * Use PyConfig API on Python 3.8 (#5404)\n  * Fix resource leak in unParseTTInstrs (#5476)\n  * Only install GUI-specific files if ENABLE_GUI is set (#5451)\n  * add math device tables to Python API (#5348)\n  * Update CI runner to macOS 13 (#5482)\n  * Allow hyphen and special characters in Feature File glyph names (#5358)\n  * Fix Python font.appendSFNTName() function (#5494)\n  * Update mm.c (#5386)\n  * Warning rollup (probably some hidden bugs!) from clang trunk (#5492)\n  * Fix function PyFFFont_addSmallCaps. (#5519)\n  * Make SmallCaps() create symbols (#5517)\n  * Segfault fix and complete implementation of \"Don't generate FFTM tables\" (#5509)\n  * Modernize fixed pitch flag computation (#5506)\n  * fix memleak in function utf7toutf8_copy (#5495)\n  * Avoid crashes in Python scripts when objects are accessed in invalid state (#5483)\n  * Fix CI for Ubuntu 24 (#5531)\n  * Bump GitHub CI runner to Ubuntu 22 (#5551)\n  * Fix memory corruption in SFUnicodeRanges() (#5537)\n  * Add contour draw option to H.Metrics. (#5496)\n  * Fix scaling of references in CharView (#5558)\n  * Fix TTF validation on load for fixed pitch fonts (#5562)\n  * Performance fixes for GSUB/GPOS dumps (#5547)\n  * Simple GTK-based dialog with CSS appearance support (#5546)\n  * Support Harfbuzz in Metrics View (#5522)\n  * Update po files from crowdin translations (#5575)\n  * Be more clever about label text in gtextfield (#5583)\n  * Add minimal support for GDEF version 1.3 (#5584)\n  * Sanitize messages from python (#5589)\n  * Fix a crash caused by deleting a glyph with vertical kerning pairs. (#5592)\n  * THEME -\u003e GUI_THEME (#5596)\n  * Update po translations from Crowdin (#5593)\n  * Upgrade to Unicode 16.0.0 (#5594)\n  * Fix Linux AppImage (#5599)\n  * Upgrade to Unicode 17.0.0 and extend the language and script lists (#5618)\n  * Remove X11 and non-Cairo drawing backends (#5612)\n  * Add macOS dependency setup script (#5563)\n  * Fix hotkeys in BitmapView (#5626)\n  * Manually install Inno Setup 6 (#5621)\n  * Remove cv-\u003eback_img_out_of_date and cv-\u003ebackimgs (#5625)\n  * fix spelling \"bt\" -\u003e \"but\" (#5636)\n  * Fix typos in Python module docs (#5634)\n\n- Version update to 20230101+git59.770356c9b:\n\n  * Add contour draw option to H.Metrics. (#5496)\n  * Fix memory corruption in SFUnicodeRanges() (#5537)\n  * Bump GitHub CI runner to Ubuntu 22 (#5551)\n  * Fix CI for Ubuntu 24 (#5531)\n  * Avoid crashes in Python scripts when objects are accessed in\n    invalid state (#5483)\n  * fix memleak in function utf7toutf8_copy (#5495)\n  * Modernize fixed pitch flag computation (#5506)\n  * Segfault fix and complete implementation of \"Don't generate\n    FFTM tables\" (#5509)\n  * Make SmallCaps() translate symbols, too.  Update\n    documentation accordingly. (#5517)\n  * Fix function PyFFFont_addSmallCaps. (#5519)\n  * Warning rollup (probably some hidden bugs!) from clang trunk\n    (#5492)\n  * Update mm.c (#5386)\n  * fix memleak in function DlgCreate8 (#5491)\n  * Fix Python font.appendSFNTName() function (#5494)\n  * Allow hyphen and special characters in Feature File glyph names\n    (#5358)\n  * Update CI runner to macOS 13 (#5482)\n  * add math device tables to Python API (#5348)\n  * Only install GUI-specific files if ENABLE_GUI is set (#5451)\n  * Fix resource leak in unParseTTInstrs (#5476)\n  * Use PyConfig API on Python 3.8 (#5404)\n  * Use sysconfig for Python module locations (#5423)\n  * More crowdin fix\n  * Python script shall trigger no asserts (#5410)\n  * crowdin: update to java 17 (#5447)\n  * try fix crowdin\n  * Fix generated feature file bugs (#5384)\n  * Defer crowdin update to the end of the pipeline (#5409)\n  * Fix export of supplementary plane characters in font name to\n    TTF (#5396)\n  * Don't attempt to copy anchors into NULL font (#5405)\n  * Treat FT_PIXEL_MODE_MONO as 2 grey levels (#5379)\n  * Compare vertical metrics check when generating TTC (#5372)\n  * Fix data corruption on SFD reading (#5380)\n  * doc: added missing sudo to installation instructions (#5300)\n  * Remove `psaltnames` for multi-code-point names (#5305)\n  * Support suplementary planes in SFD (emojis etc.) (#5364)\n  * Fix the lists of Windows language IDs (#5359)\n  * fix splinefont shell command injection (#5367)\n  * Bulk tester (#5365)\n  * add `font.style_set_names` attribute to Python API (#5354)\n  * Fix typos in the FAQ (#5355)\n  * Autoselect internal WOFF2 format (#5346)\n  * fix segfault triggered by Python `del c[i:j]` (#5352)\n  * add `font` attributes, method to Python docs (#5353)\n  * Always set `usDefaultChar` to 0 (.notdef) (#5242)\n  * Fix generateFontPostHook being called instead of\n    generateFontPreHook (#5226)\n  * nltransform of anchor points (#5345)\n  * Don't require individual tuple encapsulation in\n    fontforge.font.bitmapSizes setter (#5138)\n  * Fix CMake function _get_git_version() (#5342)\n  * Handle failed iconv conversion. Unhandled execution path was\n    UB, causing a segfault for me (#5329)\n  * Fix crash in parsegvar() due to insufficient buffer (#5339)\n  * Quiet strict prototypes warnings. (#5313)\n  * harmonizing can now no longer produce zero handles, the\n    computation of harmonization is now numerically robust (#5262)\n  * Fix glyph file names uXXXXX (#5333)\n  * Fix lookup flags parsing (#5338)\n  * Duplicate libfontforge.dll for \"py\" and \"pyhook\" tests. (#5335)\n  * Use consistent Python in MacOS GitHub runner (#5331)\n  * Update po files from Croudin sources after fixing problems\n  * Fix GinHub CI runners (#5328)\n","status":"published","published":"2026-02-14T21:30:08Z","modified":"2026-03-23T04:52:54.874025Z","updated_at":"2026-11-02T15:54:01.953589Z"}]}}