[Bug 1751048] New: CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048

            Bug ID: 1751048
           Summary: CVE-2019-15785 fontforge: buffer overflow in
                    PrefsUI_LoadPrefs in prefs.c
           Product: Security Response
          Hardware: All
                OS: Linux
            Status: NEW
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team(a)redhat.com
          Reporter: darunesh(a)redhat.com
                CC: eng-i18n-bugs(a)redhat.com,
                    fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com,
                    paul(a)frixxon.co.uk, pnemade(a)redhat.com
  Target Milestone: ---
    Classification: Other



A vulnerability was found in FontForge through 20190801 has a buffer overflow
in PrefsUI_LoadPrefs in prefs.c.

Reference:
https://github.com/fontforge/fontforge/pull/3886

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048

Dhananjay Arunesh <darunesh(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Depends On|                            |1751050



--- Comment #1 from Dhananjay Arunesh <darunesh(a)redhat.com&gt; ---
Created fontforge tracking bugs for this issue:

Affects: fedora-all [bug 1751050]


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1751050
[Bug 1751050] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in
prefs.c [fedora-all]
-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048

Dhananjay Arunesh <darunesh(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |1751051



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048

Parag Nemade <pnemade(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048

Parag Nemade <pnemade(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |CLOSED
         Resolution|---                         |NOTABUG
        Last Closed|                            |2019-09-18 11:23:43



--- Comment #2 from Parag Nemade <pnemade(a)redhat.com&gt; ---
Please note there is no upstream release that includes the initial commit
https://github.com/fontforge/fontforge/commit/626f751752875a0ddd74b9e217b...
that added warn_script_unsaved to fontview.c and prefs.c files. Then how come
this CVE got reported against Fedora 30?

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048
Bug 1751048 depends on bug 1751050, which changed state.

Bug 1751050 Summary: CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in
prefs.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1751050

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |CLOSED
         Resolution|---                         |NOTABUG



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048

Marco Benatto <mbenatto(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|CLOSED                      |NEW
         Resolution|NOTABUG                     |---
           Keywords|                            |Reopened



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048

Marco Benatto <mbenatto(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|medium                      |low
           Severity|medium                      |low



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048



--- Comment #4 from Marco Benatto <mbenatto(a)redhat.com&gt; ---
Statement:

The versions of fontforge package shipped with Red Hat Enterprise Linux 5, 6, 7
and 8 are not affected by this issue as it doesn't contain the code where the
vulnerability resides.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1751048] CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c

https://bugzilla.redhat.com/show_bug.cgi?id=1751048

Marco Benatto <mbenatto(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |NOTABUG
        Last Closed|2019-09-18 11:23:43         |2019-09-19 20:03:06



-- 
You are receiving this mail because:
You are on the CC list for the bug.