ALSA-2020:4952

Source
https://errata.almalinux.org/8/ALSA-2020-4952.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2020:4952.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2020:4952
Related
Published
2020-11-05T08:26:43Z
Modified
2020-11-05T08:26:43Z
Summary
Important: freetype security update
Details

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.

Security Fix(es):

  • freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng (CVE-2020-15999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / freetype

Package

Name
freetype

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9.1-4.el8_3.1

AlmaLinux:8 / freetype-devel

Package

Name
freetype-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9.1-4.el8_3.1