ELSA-2025-3407 — Important: freetype security update (Oracle Linux 9)

Summary

[2.10.4-10]
- Fix for CVE-2025-27363 out-of-bound write vulnerability
- Patch initially by Marc Deslauriers of Canonical
- https://www.openwall.com/lists/oss-security/2025/03/14/3
- Adjusted for EL9 by Jonathan Wright of AlmaLinux
- and a member of the Meta security team
- Resolves: RHEL-83105

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	freetype	0:2.10.4-10.el9_5
Oracle Linux · 9	freetype-devel	0:2.10.4-10.el9_5

Vulnerabilities 1

High 8.1

CVE-2025-27363 Exploited Public exploit EPSS 28%

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) whe…

FreeType FreeType freetype freetype Debian Ubuntu Azure Linux Alpine

Mar 11, 2025
KEV May 6, 2025

Important: freetype security update (Oracle Linux 9)

Summary

Fixed packages 2

Vulnerabilities 1

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) whe…