Red Hat Security AdvisoryRHSA-2020:4907
freetype security update
Released 2020-11-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) freetype-2.8-14.el7_9.1
- Red Hat Enterprise Linux Client Optional (v. 7) freetype-demos-2.8-14.el7_9.1, freetype-devel-2.8-14.el7_9.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) freetype-demos-2.8-14.el7_9.1, freetype-devel-2.8-14.el7_9.1
- Red Hat Enterprise Linux Server (v. 7) freetype-2.8-14.el7_9.1, freetype-2.8-14.el7_9.1.ppc, freetype-devel-2.8-14.el7_9.1 +1
- Red Hat Enterprise Linux Server Optional (v. 7) freetype-demos-2.8-14.el7_9.1
- Red Hat Enterprise Linux Workstation (v. 7) freetype-2.8-14.el7_9.1, freetype-devel-2.8-14.el7_9.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) freetype-demos-2.8-14.el7_9.1
Fixes 1 record
Priority CRITICAL 98KEV
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.63894 · Published 2020-11-03 · Fixed in 86.0.4240.111, 85.3.130 CWE-120
