[Bug 1475388] New: CVE-2017-11570 fontforge: Buffer over-read in umodenc function

https://bugzilla.redhat.com/show_bug.cgi?id=1475388

Bug ID: 1475388
           Summary: CVE-2017-11570 fontforge: Buffer over-read in umodenc
                    function
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: low
          Priority: low
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail]

FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c)
resulting in DoS or via a crafted otf file.

Upstream issue:

https://github.com/fontforge/fontforge/issues/3097