Most recent entries from all

ALSA-2022:7745 — Moderate: freetype security update

Affected: AlmaLinux:8: freetype, AlmaLinux:8: freetype-devel

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.

Security Fix(es):

* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404) * FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405) * Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-06908

Withdrawn: BELL-CVE-2022-27404 — CVE-2022-27404 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-15307

fkie_cve-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.

GHSA-22wv-f9f6-xwwm

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.

gsd-2022-27404

msrc_CVE-2022-27404 — FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the funct…

msrc_CVE-2022-27404

OESA-2022-1655 — freetype security update

Affected: openEuler:20.03-LTS-SP1: freetype, openEuler:20.03-LTS-SP3: freetype, openEuler:22.03-LTS: freetype

FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats

Security Fix(es):

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.(CVE-2022-27404)

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.(CVE-2022-27405)

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.(CVE-2022-27406)

openSUSE-SU-2024:12279-1 — freetype2-devel-2.12.1-3.1 on GA media

freetype2-devel-2.12.1-3.1 on GA media

RHSA-2024:0420 — Red Hat Security Advisory: freetype security update

FreeType: Buffer overflow in sfnt_init_face FreeType: Segmentation violation via FNT_Size_Request Freetype: Segmentation violation via FT_Request_Size

SUSE-SU-2022:3252-2 — Security update for freetype2

Security update for freetype2

UBUNTU-CVE-2022-27404

Affected: Ubuntu:18.04:LTS: freetype, Ubuntu:20.04:LTS: freetype, Ubuntu:22.04:LTS: freetype

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.

WID-SEC-W-2022-0775 — FreeType: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FreeType ausnutzen, um unbekannte Auswirkungen herbeizuführen.