Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2022:3252-1 Moderate: freetype2 Segmentation Faults and Overflows

suse
Calendar Grey September 12, 2022
Dist Suse Esm H88
SUSE has rolled out a new update targeting critical vulnerabilities found in freetype2, aimed at enhancing both system reliability and security.
An update that fixes three vulnerabilities is now available

Summary

This update for freetype2 fixes the following issues: - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830). - CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832). - CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823). Non-security fixes: - Updated to version 2.10.4 Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3252=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3252=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3252=1

Topics%20covered

Topics Covered

security advisory moderate update buffer overflow SUSE Linux segmentation fault freetype2

References

#1198823 #1198830 #1198832

Cross- CVE-2022-27404 CVE-2022-27405 CVE-2022-27406

CVSS scores:

CVE-2022-27404 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-27404 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

CVE-2022-27405 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2022-27405 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2022-27406 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2022-27406 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Desktop 15-SP3

SUSE Linux Enterprise Desktop 15-SP4

SUSE Linux Enterprise High Performance Computing 15-SP3

SUSE Linux Enterprise High Performance Computing 15-SP4

SUSE Linux Enterprise Micro 5.1

Announcement ID: SUSE-SU-2022:3252-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update buffer overflow SUSE Linux segmentation fault freetype2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here