CVE-2022-27404
Fixed in a distro release EPSS 3%
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.
Products: freetype, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | freetype | 2.9.1-9.el8 |
| AlmaLinux 8 | freetype-devel | 2.9.1-9.el8 |
| AlmaLinux 9 | freetype | 2.10.4-9.el9 |
| AlmaLinux 9 | freetype-devel | 2.10.4-9.el9 |
| Alpine 3.12 | freetype | 2.10.4-r1 |
| Alpine 3.13 | freetype | 2.10.4-r2 |
| Alpine 3.14 | freetype | 2.10.4-r2 |
| Alpine 3.15 | freetype | 2.11.1-r1 |
| Alpine 3.16 | freetype | 2.12.1-r0 |
| Alpine 3.17 | freetype | 2.12.1-r0 |
| Alpine 3.18 | freetype | 2.12.1-r0 |
| Alpine 3.19 | freetype | 2.12.1-r0 |
| Alpine 3.20 | freetype | 2.12.1-r0 |
| Alpine 3.21 | freetype | 2.12.1-r0 |
| Alpine 3.22 | freetype | 2.12.1-r0 |
| Alpine 3.23 | freetype | 2.12.1-r0 |
| Alpine 3.24 | freetype | 2.12.1-r0 |
| Amazon Linux 2 | freetype | 2.8-14.amzn2.1.1 |
| Amazon Linux 2 | freetype-demos | 2.8-14.amzn2.1.1 |
| Amazon Linux 2 | freetype-devel | 2.8-14.amzn2.1.1 |
| Amazon Linux 2023 | freetype | 2.12.1-3.amzn2023.0.1 |
| Amazon Linux 2023 | freetype-demos | 2.12.1-3.amzn2023.0.1 |
| Amazon Linux 2023 | freetype-devel | 2.12.1-3.amzn2023.0.1 |
| Chainguard | freetype | 0 |
| Debian 12 | freetype | 2.11.1+dfsg-2 |
| Debian 13 | freetype | 2.11.1+dfsg-2 |
| Debian 14 | freetype | 2.11.1+dfsg-2 |
| Red Hat Enterprise Linux 8 | freetype | 0:2.9.1-9.el8 |
| Red Hat Enterprise Linux 8 | freetype-debuginfo | 0:2.9.1-9.el8 |
| Red Hat Enterprise Linux 8 | freetype-debugsource | 0:2.9.1-9.el8 |
| Red Hat Enterprise Linux 8 | freetype-demos-debuginfo | 0:2.9.1-9.el8 |
| Red Hat Enterprise Linux 8 | freetype-devel | 0:2.9.1-9.el8 |
| Red Hat Enterprise Linux 9 | freetype | 0:2.10.4-9.el9 |
| Red Hat Enterprise Linux 9 | freetype-debuginfo | 0:2.10.4-9.el9 |
| Red Hat Enterprise Linux 9 | freetype-debugsource | 0:2.10.4-9.el9 |
| Red Hat Enterprise Linux 9 | freetype-demos-debuginfo | 0:2.10.4-9.el9 |
| Red Hat Enterprise Linux 9 | freetype-devel | 0:2.10.4-9.el9 |
| Red Hat rhel eus 8.6 | freetype | 0:2.9.1-5.el8_6.3 |
| Red Hat rhel eus 8.6 | freetype-debuginfo | 0:2.9.1-5.el8_6.3 |
| Red Hat rhel eus 8.6 | freetype-debugsource | 0:2.9.1-5.el8_6.3 |
| Red Hat rhel eus 8.6 | freetype-demos-debuginfo | 0:2.9.1-5.el8_6.3 |
| Red Hat rhel eus 8.6 | freetype-devel | 0:2.9.1-5.el8_6.3 |
| Rocky Linux 8 | freetype | 0:2.9.1-9.el8 |
| Rocky Linux 9 | freetype | 0:2.10.4-9.el9 |
| SUSE Enterprise Storage 6 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Enterprise Storage 7 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Enterprise Storage 7 | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Micro 5.1 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Micro 5.2 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP3 | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server 15-LTSS | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Linux Micro 6.0 | freetype2 | 2.13.3-1.1 |
| SUSE Manager Proxy 4.1 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Manager Proxy 4.1 | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Manager Retail Branch Server 4.1 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Manager Retail Branch Server 4.1 | ft2demos | 2.10.4-150000.4.12.1 |
| SUSE Manager Server 4.1 | freetype2 | 2.10.4-150000.4.12.1 |
| SUSE Manager Server 4.1 | ft2demos | 2.10.4-150000.4.12.1 |
| Ubuntu 18.04 LTS | freetype | 2.8.1-2ubuntu2.2 |
| Ubuntu 20.04 LTS | freetype | 2.10.1-2ubuntu0.2 |
| Ubuntu 22.04 LTS | freetype | 2.11.1+dfsg-1ubuntu0.1 |
| Wolfi | freetype | 0 |
| openSUSE Leap 15.3 | freetype2 | 2.10.4-150000.4.12.1 |
| openSUSE Leap 15.3 | ft2demos | 2.10.4-150000.4.12.1 |
| openSUSE Leap 15.4 | freetype2 | 2.10.4-150000.4.12.1 |
| openSUSE Leap 15.4 | ft2demos | 2.10.4-150000.4.12.1 |
| openSUSE Leap Micro 5.2 | freetype2 | 2.10.4-150000.4.12.1 |
| openSUSE Tumbleweed | freetype2 | 2.12.1-3.1 |
| openSUSE Tumbleweed | libqt5-qtbase | 5.15.6+kde177-1.1 |