Medium ELSA-2022-7745 3 CVEs

Moderate: freetype security update (Oracle Linux 8)

Published Nov 15, 2022 · Updated Nov 15, 2022

Ecosystem: Oracle Linux

Summary

[2.9.1-9]
- Guard face->size
- Resolves: #2079279

[2.9.1-8]
- Properly guard face_index
- Resolves: #2079261

[2.9.1-7]
- Do not search for windres
- Resolves: #2079270

[2.9.1-6]
- Avoid invalid face index
- Resolves: #2079270

[2.9.1-5]
- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891906

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	freetype	0:2.9.1-9.el8
Oracle Linux · 8	freetype-devel	0:2.9.1-9.el8

Vulnerabilities 3

Unscored —

CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the funct…

qt5-qtwebengine freetype freetype qt5-qtbase Debian Ubuntu Azure Linux Alpine

Apr 22, 2022
Unscored —

CVE-2022-27405

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the fun…

qt5-qtwebengine freetype freetype freetype Debian Ubuntu Azure Linux Alpine

Apr 22, 2022
Unscored —

CVE-2022-27406

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the fun…

qt5-qtwebengine freetype freetype qt5-qtbase Debian Ubuntu Azure Linux Alpine

Apr 22, 2022