Skip to content
OpenAdvisories
Medium ALAS2023-2026-3446 1 CVE

Moderate: freetype security update (Amazon Linux 2023)

Published Nov 12, 2026 · Updated Nov 12, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-2004: An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in src/truetype/ttgxvar.c.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2023 freetype 0:2.13.0-2.amzn2023.0.1
Amazon Linux · 2023 freetype-debuginfo 0:2.13.0-2.amzn2023.0.1
Amazon Linux · 2023 freetype-debugsource 0:2.13.0-2.amzn2023.0.1
Amazon Linux · 2023 freetype-demos 0:2.13.0-2.amzn2023.0.1
Amazon Linux · 2023 freetype-demos-debuginfo 0:2.13.0-2.amzn2023.0.1
Amazon Linux · 2023 freetype-devel 0:2.13.0-2.amzn2023.0.1

Vulnerabilities 1

  • Unscored —
    CVE-2023-2004 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

    freetype Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2004.html