tocsin

Debian/freetype: high 8.1

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variabl

Action: Upgrade freetype to 2.12.1+dfsg-5+deb12u4 or later.

Affected

introducedfixedlast affected
02.12.1+dfsg-5+deb12u4-

Fixed versions

2.12.1+dfsg-5+deb12u4

Sources

published · modified · JSON