[Bug 1526142] CVE-2017-17521 fontforge: Command injetion in help function uiutil.c

https://bugzilla.redhat.com/show_bug.cgi?id=1526142

Pedro Yóssis Silva Barbosa <pebarbos(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |WONTFIX
         Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017
                   |1214,reported=20171214,sour |1214,reported=20171214,sour
                   |ce=debian,cvss3=5.3/CVSS:3. |ce=debian,cvss3=5.3/CVSS:3.
                   |0/AV:L/AC:L/PR:N/UI:R/S:U/C |0/AV:L/AC:L/PR:N/UI:R/S:U/C
                   |:L/I:L/A:L,cwe=CWE-20,fedor |:L/I:L/A:L,cwe=CWE-20,fedor
                   |a-all/fontforge=affected,rh |a-all/fontforge=affected,rh
                   |el-6/fontforge=new,rhel-7/f |el-6/fontforge=wontfix,rhel
                   |ontforge=new,rhel-8/fontfor |-7/fontforge=wontfix,rhel-8
                   |ge=affected                 |/fontforge=affected
        Last Closed|                            |2018-01-02 12:42:17



-- 
You are receiving this mail because:
You are on the CC list for the bug.