Red Hat Security Advisory

RHSA-2020:4949

freetype security update

Released 2020-11-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v. 8.0) freetype-2.9.1-4.el8_0.1, freetype-devel-2.9.1-4.el8_0.1

Fixes 1 record

TI-2020-12611 CVE-2020-15999 · GHSA-pv36-h7jh-qm62

Buffer overflow in Google Chrome

CRITICAL 98KEV

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.63894 Published 2020-11-03 Fixed in 86.0.4240.111, 85.3.130 CWE-120