Description
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FreeType | FreeType | 2.13.2 – ≤ 2.13.3, 2.14.0 – ≤ 2.14.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | freetype | 2.14.2+dfsg-1 | — |
| Debian 13 | freetype | 2.13.3+dfsg-1+deb13u1 | DSA-6168-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | openjdk-8 +3 | No fix yet | — |
| Ubuntu 26.04 LTS | openjdk-17 | 17.0.19+10-1~26.04.2 | — |
| Ubuntu 26.04 LTS | openjdk-17-crac | 17.0.19+10-0ubuntu1~26.04.1 | — |
| Ubuntu 26.04 LTS | openjdk-21 | 21.0.11+10-1~26.04.2 | — |
| Ubuntu 26.04 LTS | openjdk-21-crac | 21.0.11+10-0ubuntu1~26.04.1 | — |
| Ubuntu 26.04 LTS | openjdk-25 | 25.0.3+9-2~26.04.2 | — |
| Ubuntu 26.04 LTS | openjdk-25-crac | 25.0.3+9-0ubuntu1~26.04.1 | — |
| Ubuntu 26.04 LTS | openjdk-26 | 26.0.1+8-2~26.04.2 | — |
| Ubuntu 26.04 LTS | openjdk-8 | 8u492-ga~us2-0ubuntu1~26.04.1 | — |
| Ubuntu 26.04 LTS | openjdk-lts | 11.0.31+11-1ubuntu1~26.04.2 | — |
| Ubuntu 25.10 | freetype | 2.13.3+dfsg-1ubuntu0.1 | USN-8086-1 |
| Ubuntu 25.10 | openjdk-17 | 17.0.19+10-1~25.10.2 | — |
| Ubuntu 25.10 | openjdk-17-crac | 17.0.19+10-0ubuntu1~25.10.1 | — |
| Ubuntu 25.10 | openjdk-21 | 21.0.11+10-1~25.10.2 | — |
| Ubuntu 25.10 | openjdk-21-crac | 21.0.11+10-0ubuntu1~25.10.1 | — |
| Ubuntu 25.10 | openjdk-25 | 25.0.3+9-2~25.10.2 | — |
| Ubuntu 25.10 | openjdk-25-crac | 25.0.3+9-0ubuntu1~25.10.1 | — |
| Ubuntu 25.10 | openjdk-26 | 26.0.1+8-2~25.10.2 | — |
| Ubuntu 25.10 | openjdk-8 | 8u492-ga~us2-0ubuntu1~25.10.1 | — |
| Ubuntu 25.10 | openjdk-lts | 11.0.31+11-1ubuntu1~25.10.2 | — |
| Ubuntu 24.04 LTS | freetype | 2.13.2+dfsg-1ubuntu0.1 | USN-8086-1 |
| Ubuntu 24.04 LTS | openjdk-17 | 17.0.19+10-1~24.04.2 | — |
| Ubuntu 24.04 LTS | openjdk-21 | 21.0.11+10-1~24.04.2 | — |
| Ubuntu 24.04 LTS | openjdk-25 | 25.0.3+9-2~24.04.2 | — |
| Ubuntu 24.04 LTS | openjdk-8 | 8u492-ga~us2-0ubuntu1~24.04.1 | — |
| Ubuntu 24.04 LTS | openjdk-lts | 11.0.31+11-1ubuntu1~24.04.2 | — |
| Ubuntu 22.04 LTS | openjdk-17 | 17.0.19+10-1~22.04.2 | — |
| Ubuntu 22.04 LTS | openjdk-18 | No fix yet | — |
| Ubuntu 22.04 LTS | openjdk-21 | 21.0.11+10-1~22.04.2 | — |
| Ubuntu 22.04 LTS | openjdk-25 | 25.0.3+9-2~22.04.2 | — |
| Ubuntu 22.04 LTS | openjdk-8 | 8u492-ga~us2-0ubuntu1~22.04.1 | — |
| Ubuntu 22.04 LTS | openjdk-lts | 11.0.31+11-1ubuntu1~22.04.2 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | openjdk-13 +1 | No fix yet | — |
| Ubuntu 16.04 LTS | openjdk-9 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | openjdk-17 | 17.0.19+10-1~20.04.2 | — |
| Ubuntu Pro 20.04 LTS | openjdk-21 | 21.0.11+10-1~20.04.2 | — |
| Ubuntu Pro 20.04 LTS | openjdk-8 | 8u492-ga~us2-0ubuntu1~20.04.1 | — |
| Ubuntu Pro 20.04 LTS | openjdk-lts | 11.0.31+11-1ubuntu1~20.04.2 | — |
| Ubuntu Pro 18.04 LTS | openjdk-17 | 17.0.19+10-1~18.04.2 | — |
| Ubuntu Pro 18.04 LTS | openjdk-8 | 8u492-ga~us2-0ubuntu1~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | openjdk-lts | 11.0.31+11-1ubuntu1~18.04.2 | — |
| Ubuntu Pro 16.04 LTS | openjdk-8 | 8u492-ga~us2-0ubuntu1~16.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | java-21-ibm-semeru-certified-jdk +4 | 1:21.0.11.0.10-2.el10_1 | RHSA-2026:22328 |
| RHEL 10 | java-21-openjdk +22 | 1:21.0.11.0.10-2.el10_2 | RHSA-2026:9689 |
| RHEL 10 | java-25-openjdk +25 | 1:25.0.3.0.9-1.el10_2 | RHSA-2026:9693 |
| RHEL 9 | java-1.8.0-openjdk +16 | 1:1.8.0.492.b09-2.el9 | RHSA-2026:9683 |
| RHEL 9 | java-17-openjdk +22 | 1:17.0.19.0.10-2.el9 | RHSA-2026:9686 |
| RHEL 9 | java-21-openjdk +22 | 1:21.0.11.0.10-2.el9 | RHSA-2026:9689 |
| RHEL 9 | java-25-openjdk +25 | 1:25.0.3.0.9-1.el9 | RHSA-2026:9693 |
| RHEL 8 | java-1.8.0-openjdk +19 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 8 | java-17-openjdk +22 | 1:17.0.19.0.10-1.el8 | RHSA-2026:9686 |
| RHEL 8 | java-21-openjdk +22 | 1:21.0.11.0.10-1.el8 | RHSA-2026:9689 |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.2 EUS | java-21-ibm-semeru-certified-jdk +4 | 1:21.0.11.0.10-2.el10_1 | RHSA-2026:22328 |
| RHEL 10.0 EUS | java-21-ibm-semeru-certified-jdk +1 | 1:21.0.11.0.10-1.el10_0 | RHSA-2026:22328 |
| RHEL 10.0 EUS | java-21-openjdk +22 | 1:21.0.11.0.10-1.el10_2 | RHSA-2026:9689 |
| RHEL 9.6 EUS | java-1.8.0-openjdk +16 | 1:1.8.0.492.b09-1.el9 | RHSA-2026:9683 |
| RHEL 9.6 EUS | java-17-openjdk +22 | 1:17.0.19.0.10-1.el9 | RHSA-2026:9686 |
| RHEL 9.6 EUS | java-21-openjdk +22 | 1:21.0.11.0.10-1.el9 | RHSA-2026:9689 |
| RHEL 9.4 EUS | java-1.8.0-openjdk +16 | 1:1.8.0.492.b09-1.el9 | RHSA-2026:9683 |
| RHEL 9.4 EUS | java-17-openjdk +22 | 1:17.0.19.0.10-1.el9 | RHSA-2026:9686 |
| RHEL 9.4 EUS | java-21-openjdk +22 | 1:21.0.11.0.10-1.el9 | RHSA-2026:9689 |
| RHEL 9.2 E4S | java-1.8.0-openjdk +6 | 1:1.8.0.492.b09-1.el9 | RHSA-2026:9683 |
| RHEL 9.2 E4S | java-17-openjdk +8 | 1:17.0.19.0.10-1.el9 | RHSA-2026:9686 |
| RHEL 9.0 E4S | java-1.8.0-openjdk +6 | 1:1.8.0.492.b09-1.el9 | RHSA-2026:9683 |
| RHEL 9.0 E4S | java-17-openjdk +8 | 1:17.0.19.0.10-1.el9 | RHSA-2026:9686 |
| RHEL 8.8 TUS | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 8.8 TUS | java-17-openjdk +8 | 1:17.0.19.0.10-1.el8 | RHSA-2026:9686 |
| RHEL 8.8 E4S | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 8.8 E4S | java-17-openjdk +8 | 1:17.0.19.0.10-1.el8 | RHSA-2026:9686 |
| RHEL 8.6 TUS | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 8.6 TUS | java-17-openjdk +8 | 1:17.0.19.0.10-1.el8 | RHSA-2026:9686 |
| RHEL 8.6 E4S | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 8.6 E4S | java-17-openjdk +8 | 1:17.0.19.0.10-1.el8 | RHSA-2026:9686 |
| RHEL 8.6 AUS | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 8.6 AUS | java-17-openjdk +8 | 1:17.0.19.0.10-1.el8 | RHSA-2026:9686 |
| RHEL 8.4 EUS Long Life | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 8.4 EUS Long Life | java-17-openjdk +22 | 1:17.0.19.0.10-1.el8 | RHSA-2026:9686 |
| RHEL 8.4 AUS | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 8.4 AUS | java-17-openjdk +8 | 1:17.0.19.0.10-1.el8 | RHSA-2026:9686 |
| RHEL 8.2 AUS | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el8 | RHSA-2026:9683 |
| RHEL 7 ELS | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.el7_9 | RHSA-2026:9682 |
| Red Hat Openjdk Els 11 | java-11-openjdk +17 | 1:11.0.31.0.11-1.el7_9 | RHSA-2026:9254 |
| Red Hat Openjdk Els 11 | java-11-openjdk-fastdebug +13 | 1:11.0.31.0.11-1.el8 | RHSA-2026:9254 |
| Red Hat Hardened Images 1 | freetype +2 | 2.14.3-1.hum1 | RHSA-2026:7933 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | java-21-openjdk +22 | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux 10 | java-25-openjdk +25 | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux 9 | java-1.8.0-openjdk +16 | 1:1.8.0.492.b09-2.el9.alma.1 | ALSA-2026:9683 |
| AlmaLinux 9 | java-17-openjdk +22 | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux 9 | java-21-openjdk +22 | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux 9 | java-25-openjdk +25 | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux 8 | java-1.8.0-openjdk +19 | 1:1.8.0.492.b09-1.el8 | ALSA-2026:9683 |
| AlmaLinux 8 | java-17-openjdk +22 | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux 8 | java-21-openjdk +22 | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | java-25-openjdk | 1:25.0.3.0.9-1.el10_1 | RLSA-2026:9693 |
| Rocky Linux 9 | java-21-openjdk | 1:21.0.11.0.10-2.el9_7 | RLSA-2026:9689 |
| Rocky Linux 8 | java-1.8.0-openjdk | 1:1.8.0.492.b09-1.el8_10 | RLSA-2026:9683 |
| Rocky Linux 8 | java-17-openjdk | 1:17.0.19.0.10-1.el8_10 | RLSA-2026:9686 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | java-1_8_0-openjdk | 1.8.0.492-27.128.1 | SUSE-SU-2026:2624-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | freetype2 | 2.14.3-160000.1.1 | SUSE-SU-2026:22815-1 |
| SLES 16.0 | freetype2 | 2.14.3-160000.1.1 | SUSE-SU-2026:22815-1 |
| SLE Micro 6.2 | freetype2 | 2.14.3-160000.1.1 | SUSE-SU-2026:22750-1 |
| SLE Micro 6.1 | freetype2 | 2.14.2-slfo.1.1_1.1 | SUSE-SU-2026:20726-1 |
| SLE Micro 6.0 | busybox | 1.36.1-3.1 | SUSE-SU-2026:20726-1 |
| SLE Micro 6.0 | freetype2 | 2.14.2-1.1 | SUSE-SU-2026:20730-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | freetype2 | 2.14.2-1.1 | openSUSE-SU-2026:10289-1 |
| openSUSE Tumbleweed | java-11-openjdk | 11.0.31.0-1.1 | openSUSE-SU-2026:10636-1 |
| openSUSE Tumbleweed | java-17-openjdk | 17.0.19.0-1.1 | openSUSE-SU-2026:10637-1 |
| openSUSE Tumbleweed | java-1_8_0-openjdk | 1.8.0.492-1.1 | openSUSE-SU-2026:10656-1 |
| openSUSE Tumbleweed | java-21-openjdk | 21.0.11.0-1.1 | openSUSE-SU-2026:10638-1 |
| openSUSE Tumbleweed | java-25-openj9 +1 | 25.0.3.0-1.1 | openSUSE-SU-2026:10728-1, openSUSE-SU-2026:10639-1 |
| openSUSE Tumbleweed | java-26-openjdk | 26.0.1.0-1.1 | openSUSE-SU-2026:10893-1 |
| openSUSE Leap 16.0 | ft2demos +1 | 2.14.3-160000.1.1 | openSUSE-SU-2026:21362-1 |
| openSUSE Leap 16.0 | java-17-openj9 | 17.0.19.0-bp160.1.1 | openSUSE-SU-2026:20943-1 |
| openSUSE Leap 16.0 | java-21-openj9 | 21.0.11.0-bp160.1.1 | openSUSE-SU-2026:20947-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openjdk11 | 11.0.31_p11-r0 | — |
| Alpine v3.24 | openjdk17 | 17.0.19_p10-r0 | — |
| Alpine v3.24 | openjdk21 | 21.0.11_p10-r0 | — |
| Alpine v3.24 | openjdk25 | 25.0.3_p9-r0 | — |
| Alpine v3.24 | openjdk8 | 8.492.09-r0 | — |
| Alpine v3.23 | openjdk11 | 11.0.31_p11-r0 | — |
| Alpine v3.23 | openjdk17 | 17.0.19_p10-r0 | — |
| Alpine v3.23 | openjdk21 | 21.0.11_p10-r0 | — |
| Alpine v3.23 | openjdk25 | 25.0.3_p9-r0 | — |
| Alpine v3.22 | openjdk11 | 11.0.31_p11-r0 | — |
| Alpine v3.22 | openjdk17 | 17.0.19_p10-r0 | — |
| Alpine v3.22 | openjdk21 | 21.0.11_p10-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | freetype +2 | 2.13.2-5.amzn2023.0.2 | ALAS2023-2026-1486 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | freetype | 2.13.2-2 | — |
| Azure Linux 2 (CBL-Mariner) | freetype | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | java-25-openjdk +25 | 1:25.0.3.0.9-1.0.1.el10_2 | ELSA-2026-9693 |
| Oracle Linux 8 | java-1.8.0-openjdk +16 | 1:1.8.0.492.b09-2.0.1.el9 | ELSA-2026-9683 |
| Oracle Linux 8 | java-1.8.0-openjdk-accessibility +2 | 1:1.8.0.492.b09-1.0.1.el8 | ELSA-2026-9683 |
| Oracle Linux 8 | java-17-openjdk +22 | 1:17.0.19.0.10-2.0.1.el9 | ELSA-2026-9686 |
| Oracle Linux 8 | java-21-openjdk +22 | 1:21.0.11.0.10-2.0.1.el10_1 | ELSA-2026-9689 |
| Oracle Linux 7 | java-1.8.0-openjdk +7 | 1:1.8.0.492.b09-1.0.1.el7_9 | ELSA-2026-9682 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openjdk-21 | 21.0.11-r0 | — |
| Wolfi rolling | openjdk-24 +4 | No fix yet | — |
| Wolfi rolling | openjdk-26 | 26.0.1-r0 | — |
Advisories 45
- ALSA-2026:9693 Important: java-25-openjdk security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:9686 Important: java-17-openjdk security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:9689 Important: java-21-openjdk security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:9683 Important: java-1.8.0-openjdk security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-1201 Oracle Java SE: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2026
- WID-SEC-2026-2437 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 22, 2026
- RHSA-2026:9693 Red Hat Security Advisory: java-25-openjdk security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:9689 Red Hat Security Advisory: java-21-openjdk security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:9686 Red Hat Security Advisory: java-17-openjdk security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:9683 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:9682 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:9254 Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:22328 Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7933 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- WID-SEC-2026-0565 FreeType: Schwachstelle ermöglicht nicht spezifizierten Angriff BSI CERT-Bund (WID) · Sep 3, 2026
- WID-SEC-2026-1687 IBM License Metric Tool: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Sep 1, 2026
- SUSE-SU-2026:22815-1 Security update for freetype2 SUSE / openSUSE Security Updates · Jul 28, 2026
- SUSE-SU-2026:22750-1 Security update for freetype2 SUSE / openSUSE Security Updates · Jul 23, 2026
- openSUSE-SU-2026:21362-1 Security update for freetype2 SUSE / openSUSE Security Updates · Jul 18, 2026
- WID-SEC-2026-1730 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jul 16, 2026
- SUSE-SU-2026:2624-1 Security update for java-1_8_0-openjdk SUSE / openSUSE Security Updates · Jun 25, 2026
- openSUSE-SU-2026:20943-1 Security update for java-17-openj9 SUSE / openSUSE Security Updates · Jun 13, 2026
- openSUSE-SU-2026:20947-1 Security update for java-21-openj9 SUSE / openSUSE Security Updates · Jun 13, 2026
- ELSA-2026-9682 Important: java-1.8.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jun 9, 2026
- openSUSE-SU-2026:10893-1 java-26-openjdk-26.0.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 30, 2026
- RLSA-2026:9693 Important: java-25-openjdk security update Rocky Linux Security Advisories · May 21, 2026
- RLSA-2026:9683 Important: java-1.8.0-openjdk security update Rocky Linux Security Advisories · May 21, 2026
- RLSA-2026:9686 Important: java-17-openjdk security update Rocky Linux Security Advisories · May 21, 2026
- openSUSE-SU-2026:10728-1 java-25-openj9-25.0.3.0-1.1 on GA media SUSE / openSUSE Security Updates · May 9, 2026
- openSUSE-SU-2026:10656-1 java-1_8_0-openjdk-1.8.0.492-1.1 on GA media SUSE / openSUSE Security Updates · Apr 30, 2026
- openSUSE-SU-2026:10636-1 java-11-openjdk-11.0.31.0-1.1 on GA media SUSE / openSUSE Security Updates · Apr 29, 2026
- openSUSE-SU-2026:10639-1 java-25-openjdk-25.0.3.0-1.1 on GA media SUSE / openSUSE Security Updates · Apr 29, 2026
- openSUSE-SU-2026:10638-1 java-21-openjdk-21.0.11.0-1.1 on GA media SUSE / openSUSE Security Updates · Apr 29, 2026
- openSUSE-SU-2026:10637-1 java-17-openjdk-17.0.19.0-1.1 on GA media SUSE / openSUSE Security Updates · Apr 29, 2026
- RLSA-2026:9689 Important: java-21-openjdk security update Rocky Linux Security Advisories · Apr 28, 2026
- ELSA-2026-9689 Important: java-21-openjdk security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 27, 2026
- ELSA-2026-9683 Important: java-1.8.0-openjdk security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 27, 2026
- ELSA-2026-9686 Important: java-17-openjdk security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 24, 2026
- ELSA-2026-9693 Important: java-25-openjdk security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Apr 23, 2026
- USN-8086-1 freetype vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- ALAS2023-2026-1486 Moderate: freetype security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Mar 27, 2026
- SUSE-SU-2026:20726-1 Security update for freetype2 SUSE / openSUSE Security Updates · Mar 24, 2026
- SUSE-SU-2026:20730-1 Security update for freetype2 SUSE / openSUSE Security Updates · Mar 24, 2026
- openSUSE-SU-2026:10289-1 freetype2-devel-2.14.2-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-6168-1 freetype - security update Debian Security (DSA / DLA) · Mar 18, 2026