Alpine/freetype: critical 9.6
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Action: Upgrade freetype to 2.9.1-r3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.6.0 | 2.9.1-r3 | - |
Fixed versions
| 2.9.1-r3 |
Sources
- osv: ALPINE-CVE-2020-15999#Alpine:v3.9/freetype
- https://security.alpinelinux.org/vuln/CVE-2020-15999
published · modified · JSON