Description
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Chrome | unspecified – < 86.0.4240.111 | 86.0.4240.111 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | freetype | 2.10.2+dfsg-4 | — |
| Debian 13 | freetype | 2.10.2+dfsg-4 | — |
| Debian 12 | freetype | 2.10.2+dfsg-4 | — |
| Debian 10 | chromium | 87.0.4280.88-0.4~deb10u1 | DSA-4824-1 |
| Debian 10 | freetype | 2.9.1-3+deb10u2 | DSA-4777-1 |
| Debian 9 | freetype | 2.6.3-3.2+deb9u2 | DLA-2415-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | freetype | 2.10.1-2ubuntu0.1 | USN-4593-1 |
| Ubuntu 18.04 LTS | chromium-browser | 86.0.4240.198-0ubuntu0.18.04.1 | — |
| Ubuntu 18.04 LTS | freetype | 2.8.1-2ubuntu2.1 | USN-4593-1 |
| Ubuntu 16.04 LTS | android | No fix yet | — |
| Ubuntu 16.04 LTS | chromium-browser | 86.0.4240.198-0ubuntu0.16.04.1 | — |
| Ubuntu 16.04 LTS | freetype | 2.6.1-0.1ubuntu2.5 | USN-4593-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | freetype | 2.5.2-1ubuntu2.8+esm2 | USN-4593-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | freetype +1 | 2.9.1-4.el8_3.1 | RHSA-2020:4952 |
| RHEL 7 | freetype +2 | 2.8-14.el7_9.1 | RHSA-2020:4907 |
| RHEL 6 | chromium-browser | 86.0.4240.111-1.el6_10 | RHSA-2020:4351 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.2 EUS | freetype +1 | 2.9.1-4.el8_2.1 | RHSA-2020:4951 |
| RHEL 8.1 EUS | freetype +1 | 2.9.1-4.el8_1.1 | RHSA-2020:4950 |
| RHEL 8.0 E4S | freetype +1 | 2.9.1-4.el8_0.1 | RHSA-2020:4949 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | freetype +1 | 2.9.1-4.el8_3.1 | ALSA-2020:4952 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | freetype | 2.9.1-4.el8_3.1 | RLSA-2020:4952 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP2 | MozillaFirefox | 78.5.0-8.17.1 | SUSE-SU-2020:3458-1 |
| SLES 15 SP2 | MozillaThunderbird | 78.5.0-3.107.1 | SUSE-SU-2020:3528-1 |
| SLES 15 SP2 | ft2demos +1 | 2.10.1-4.8.1 | SUSE-SU-2020:2995-1 |
| SLES 15 SP1 | MozillaFirefox | 78.5.0-3.119.1 | SUSE-SU-2020:3383-1 |
| SLES 15 SP1 | MozillaThunderbird | 78.5.0-3.107.1 | SUSE-SU-2020:3528-1 |
| SLES 15 SP1 | freetype2 | 2.10.1-4.8.1 | SUSE-SU-2020:2995-1 |
| SLES 15 | freetype2 | 2.10.1-4.8.1 | SUSE-SU-2020:2995-1 |
| SLES 12 SP5 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SLES 12 SP5 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SLES 12 SP4 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SLES 12 SP4 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SLES 12 SP3 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SLES 12 SP2 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SLES 12 SP2 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SLES 11 SP4 | MozillaFirefox | 78.5.0-78.105.1 | SUSE-SU-2020:14548-1 |
| SLES for SAP 15 | freetype2 | 2.10.1-4.8.1 | SUSE-SU-2020:2995-1 |
| SLES for SAP 12 SP5 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SLES for SAP 12 SP5 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SLES for SAP 12 SP4 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SLES for SAP 12 SP4 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SLES for SAP 12 SP3 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SLES for SAP 12 SP3 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SLES for SAP 12 SP2 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SLES for SAP 12 SP2 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SLE HPC 15 | freetype2 | 2.10.1-4.8.1 | SUSE-SU-2020:2995-1 |
| SUSE Package Hub 15 SP2 | chromium | 86.0.4240.183-bp152.2.26.1 | openSUSE-SU-2020:1829-1 |
| SUSE Package Hub 15 SP2 | gn | 0.1807-bp152.2.3.4 | openSUSE-SU-2020:1829-1 |
| SUSE Package Hub 15 SP1 | chromium | 86.0.4240.111-bp151.3.116.1 | openSUSE-SU-2020:1731-1 |
| SUSE OpenStack Cloud Crowbar 9 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SUSE OpenStack Cloud Crowbar 9 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SUSE OpenStack Cloud Crowbar 8 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SUSE OpenStack Cloud Crowbar 8 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SUSE OpenStack Cloud 9 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SUSE OpenStack Cloud 9 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SUSE OpenStack Cloud 8 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SUSE OpenStack Cloud 8 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SUSE OpenStack Cloud 7 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SUSE OpenStack Cloud 7 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SUSE HPE Helion OpenStack 8 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SUSE HPE Helion OpenStack 8 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
| SUSE Enterprise Storage 5 | MozillaFirefox | 78.5.0-112.36.1 | SUSE-SU-2020:3548-1 |
| SUSE Enterprise Storage 5 | ft2demos +1 | 2.6.3-7.18.1 | SUSE-SU-2020:2998-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 92.0-1.2 | openSUSE-SU-2024:10600-1 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 | openSUSE-SU-2024:10601-1 |
| openSUSE Tumbleweed | chromium | 93.0.4577.82-1.1 | openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10681-1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 | openSUSE-SU-2024:14572-1 |
| openSUSE Tumbleweed | freetype2 | 2.11.0-1.2 | openSUSE-SU-2024:10770-1 |
| openSUSE Tumbleweed | python-Pillow | 8.3.2-1.2 | openSUSE-SU-2026:11261-1, openSUSE-SU-2024:13827-1, openSUSE-SU-2024:11209-1 |
| openSUSE Leap 15.2 | MozillaFirefox | 78.5.0-lp152.2.30.1 | openSUSE-SU-2020:2315-1, openSUSE-SU-2020:2020-1 |
| openSUSE Leap 15.2 | MozillaThunderbird | 78.5.0-lp152.2.19.1 | openSUSE-SU-2020:2096-1 |
| openSUSE Leap 15.2 | chromium | 86.0.4240.111-lp152.2.42.1 | openSUSE-SU-2020:1737-1 |
| openSUSE Leap 15.2 | ft2demos +1 | 2.10.1-lp152.2.5.1 | openSUSE-SU-2020:1744-1 |
| openSUSE Leap 15.2 | opera | 72.0.3815.320-lp152.2.21.1 | openSUSE-SU-2020:1952-1 |
| openSUSE Leap 15.2 | python-CairoSVG | 2.5.1-lp152.2.3.1 | openSUSE-SU-2021:1134-1 |
| openSUSE Leap 15.2 | python-Pillow | 8.3.1-lp152.5.3.1 | openSUSE-SU-2021:1134-1 |
| openSUSE Leap 15.1 | MozillaFirefox | 78.5.0-lp151.2.79.1 | openSUSE-SU-2020:2031-1 |
| openSUSE Leap 15.1 | MozillaThunderbird | 78.5.0-lp151.2.59.1 | openSUSE-SU-2020:2187-1 |
| openSUSE Leap 15.1 | chromium | 86.0.4240.111-lp151.2.147.1 | openSUSE-SU-2020:1718-1 |
| openSUSE Leap 15.1 | ft2demos +1 | 2.10.1-lp151.4.6.1 | openSUSE-SU-2020:1734-1 |
| openSUSE Leap 15.1 | opera | 72.0.3815.320-lp152.2.21.1 | openSUSE-SU-2020:1952-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | freetype | 2.10.4-r0 | — |
| Alpine v3.24 | librewolf | 83.0-r0 | — |
| Alpine v3.23 | firefox +1 | 83.0-r0 | — |
| Alpine v3.23 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.23 | freetype | 2.10.4-r0 | — |
| Alpine v3.23 | thunderbird | 78.5.1-r0 | — |
| Alpine v3.22 | firefox +1 | 83.0-r0 | — |
| Alpine v3.22 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.22 | freetype | 2.10.4-r0 | — |
| Alpine v3.22 | thunderbird | 78.5.1-r0 | — |
| Alpine v3.21 | firefox +1 | 83.0-r0 | — |
| Alpine v3.21 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.21 | freetype | 2.10.4-r0 | — |
| Alpine v3.21 | thunderbird | 78.5.1-r0 | — |
| Alpine v3.20 | firefox | 83.0-r0 | — |
| Alpine v3.20 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.20 | freetype | 2.10.4-r0 | — |
| Alpine v3.20 | thunderbird | 78.5.1-r0 | — |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | firefox | 83.0-r0 | — |
| Alpine v3.19 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.19 | freetype | 2.10.4-r0 | — |
| Alpine v3.19 | thunderbird | 78.5.1-r0 | — |
| Alpine v3.18 | firefox | 83.0-r0 | — |
| Alpine v3.18 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.18 | freetype | 2.10.4-r0 | — |
| Alpine v3.18 | thunderbird | 78.5.1-r0 | — |
| Alpine v3.17 | firefox | 83.0-r0 | — |
| Alpine v3.17 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.17 | freetype | 2.10.4-r0 | — |
| Alpine v3.17 | thunderbird | 78.5.1-r0 | — |
| Alpine v3.16 | firefox | 83.0-r0 | — |
| Alpine v3.16 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.16 | freetype | 2.10.4-r0 | — |
| Alpine v3.16 | thunderbird | 78.5.1-r0 | — |
| Alpine v3.15 | firefox | 83.0-r0 | — |
| Alpine v3.15 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.15 | freetype | 2.10.4-r0 | — |
| Alpine v3.14 | firefox | 83.0-r0 | — |
| Alpine v3.14 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.14 | freetype | 2.10.4-r0 | — |
| Alpine v3.13 | firefox | 83.0-r0 | — |
| Alpine v3.13 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.13 | freetype | 2.10.4-r0 | — |
| Alpine v3.12 | firefox | 83.0-r0 | — |
| Alpine v3.12 | firefox-esr | 78.5.0-r0 | — |
| Alpine v3.12 | freetype | 2.10.4-r0 | — |
| Alpine v3.11 | freetype | 2.10.1-r1 | — |
| Alpine v3.10 | freetype | 2.10.0-r1 | — |
| Alpine v3.9 | freetype | 2.9.1-r3 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | freetype +2 | 2.12.1-3.amzn2023.0.1 | ALAS2023-2023-074 |
| Amazon Linux 2 | freetype +2 | 2.8-14.amzn2.1 | ALAS2-2020-1565 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | freetype | 2.11.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | freetype +1 | 2.9.1-4.el8_3.1 | ELSA-2020-4952 |
| Oracle Linux 7 | freetype +2 | 2.8-14.el7_9.1 | ELSA-2020-4907 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 3 repositories
-
oxfemale/CVE-2020-15999 ★ 2 · Nov 4, 2020
CVE-2020-15999
-
Marmeus/CVE-2020-15999 ★ 1 · Dec 30, 2020
Todos los materiales necesarios para la PoC en Chrome y ftview
-
maarlo/CVE-2020-15999 ★ 0 · Dec 30, 2020
Repositorio con un script encargado de explotar la vulnerabilidad CVE-2020-15999
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | CefSharp.Common | < 85.3.130 | 85.3.130 | GHSA-pv36-h7jh-qm62 |
| NuGet | CefSharp.WinForms | < 85.3.130 | 85.3.130 | GHSA-pv36-h7jh-qm62 |
| NuGet | CefSharp.Wpf | < 85.3.130 | 85.3.130 | GHSA-pv36-h7jh-qm62 |
| NuGet | CefSharp.Wpf.HwndHost | < 85.3.130 | 85.3.130 | GHSA-pv36-h7jh-qm62 |
Advisories 50
- ALSA-2020:4952 Important: freetype security update AlmaLinux Security Advisories · Oct 29, 2026
- openSUSE-SU-2026:11261-1 python313-Pillow-12.3.0-1.1 on GA media SUSE / openSUSE Security Updates · Jul 13, 2026
- RHSA-2020:4951 Red Hat Security Advisory: freetype security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2020:4952 Red Hat Security Advisory: freetype security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2020:4949 Red Hat Security Advisory: freetype security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2020:4950 Red Hat Security Advisory: freetype security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2020:4907 Red Hat Security Advisory: freetype security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2020:4351 Red Hat Security Advisory: chromium-browser security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-4593-1 freetype vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-4593-2 freetype vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- DSA-4777-1 freetype - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4824-1 chromium - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2415-1 freetype - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2026-0337 Mozilla Firefox und Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 8, 2026
- RLSA-2020:4952 Important: freetype security update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2024:13827-1 python310-Pillow-10.3.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1731-1 Security update for chromium SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1952-1 Security update for opera SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:2096-1 Security update for MozillaThunderbird SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:14548-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:2315-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1737-1 Security update for chromium SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:3528-1 Security update for MozillaThunderbird SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10681-1 chromedriver-93.0.4577.82-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1718-1 Security update for chromium SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1734-1 Security update for freetype2 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10600-1 MozillaFirefox-92.0-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2995-1 Security update for freetype2 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11209-1 python36-Pillow-8.3.2-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:2031-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:2020-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:1134-1 Security update for python-CairoSVG, python-Pillow SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10770-1 freetype2-devel-2.11.0-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:3458-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1829-1 Security update for chromium, gn SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:2187-1 Security update for MozillaThunderbird SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12948-1 ungoogled-chromium-113.0.5672.92-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:3548-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2998-1 Security update for freetype2 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1744-1 Security update for freetype2 SUSE / openSUSE Security Updates · May 7, 2025
- openSUSE-SU-2024:10601-1 MozillaThunderbird-91.1.1-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- SUSE-SU-2020:3383-1 Security update for MozillaFirefox SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2022-1994 Google Android Patchday Januar BSI CERT-Bund (WID) · May 30, 2024
- WID-SEC-2024-0091 FreeType: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jan 15, 2024
- ICSA-23-264-05 Rockwell Automation Connected Components Workbench CISA ICS & IT advisories · Sep 21, 2023
- ALAS2023-2023-074 Important: freetype security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 22, 2023
- ALAS2-2020-1565 Important: freetype security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Dec 8, 2020
- ELSA-2020-4952 Important: freetype security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 13, 2020
- ELSA-2020-4907 Important: freetype security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 6, 2020
References
- https://crbug.com/1139963
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- openSUSE-SU-2020:1829 vendor-advisory
- FEDORA-2020-6b35849edd vendor-advisory
- GLSA-202011-12 vendor-advisory
- 20201118 TCMalloc viewer/dumper - TCMalloc Inspector Tool mailing-list
- GLSA-202012-04 vendor-advisory
- DSA-4824 vendor-advisory
- https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html
- GLSA-202401-19 vendor-advisory