[Bug 1475397] New: CVE-2017-11577 fontforge: Buffer over-read in getsid function

https://bugzilla.redhat.com/show_bug.cgi?id=1475397

Bug ID: 1475397
           Summary: CVE-2017-11577 fontforge: Buffer over-read in getsid
                    function
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: low
          Priority: low
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail]

FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c)
resulting in DoS or via a crafted otf file.

Upstream issue:

https://github.com/fontforge/fontforge/issues/3088