Medium ELSA-2022-8340 3 CVEs

Moderate: freetype security update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[2.10.4-9]
- Guard face->size
- Resolves: #2079280

[2.10.4-8]
- Properly guard face_index
- Resolves: #2079262

[2.10.4-7]
- Avoid invalid face index
- Resolves: #2079271

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	freetype	0:2.10.4-9.el9
Oracle Linux · 9	freetype-devel	0:2.10.4-9.el9

Vulnerabilities 3

Unscored —

CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the funct…

qt5-qtwebengine freetype freetype qt5-qtbase Debian Ubuntu Azure Linux Alpine

Apr 22, 2022
Unscored —

CVE-2022-27405

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the fun…

qt5-qtwebengine freetype freetype freetype Debian Ubuntu Azure Linux Alpine

Apr 22, 2022
Unscored —

CVE-2022-27406

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the fun…

qt5-qtwebengine freetype freetype qt5-qtbase Debian Ubuntu Azure Linux Alpine

Apr 22, 2022