[SECURITY] Fedora 39 Update: fonttools-4.43.1-1.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-6d1d9f70d2
2024-01-25 00:38:48.210927
--------------------------------------------------------------------------------
Name : fonttools
Product : Fedora 39
Version : 4.43.1
Release : 1.fc39
URL : https://github.com/fonttools/fonttools/
Summary : Tools to manipulate font files
Description :
fontTools is a library for manipulating fonts, written in Python. The project
includes the TTX tool, that can convert TrueType and OpenType fonts to and
from an XML text format, which is also called TTX. It supports TrueType,
OpenType, AFM and to an extent Type 1 and some Mac-specific formats.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-45139
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 8 2023 Parag Nemade <pnemade AT redhat DOT com> - 4.43.1-1
- Update to 4.43.1 version (#2241574)
* Tue Aug 22 2023 Parag Nemade <pnemade AT redhat DOT com> - 4.42.1-1
- Update to 4.42.1 version (#2232931)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2257808 - CVE-2023-45139 fonttools: XML External Entity Injection (XXE)
Vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=2257808
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-6d1d9f70d2' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------