Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

SUSE Linux Micro 6.0: 2025:20204-1 important: freetype2 update

suse
Calendar Grey June 4, 2025
Dist Suse Esm H88
SUSE Linux Micro 6.0 has rolled out a significant security patch for freetype2, tackling multiple severe vulnerabilities.
* bsc#1035807 * bsc#1036457 * bsc#1079600 * bsc#1198823 * bsc#1198830

Summary

## This update for freetype2 fixes the following issues: Update to 2.13.2: * Some fields in the `FT_Outline` structure have been changed from signed to unsigned type, which better reflects the actual usage. It is also an additional means to protect against malformed input. * Rare double-free crashes in the cache subsystem have been fixed. * Excessive stack allocation in the autohinter has been fixed. * The B/W rasterizer has received a major upkeep that results in large performance improvements. The rendering speed has increased and even doubled for very complex glyphs. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0

Topics%20covered

Topics Covered

security advisory security update buffer overflow important freetype2 SUSE Linux Micro

References

* bsc#1035807

* bsc#1036457

* bsc#1079600

* bsc#1198823

* bsc#1198830

* bsc#1198832

* bsc#867620

Cross-

* CVE-2014-2240

* CVE-2014-2241

* CVE-2017-8105

* CVE-2017-8287

* CVE-2022-27404

* CVE-2022-27405

* CVE-2022-27406

CVSS scores:

* CVE-2017-8105 ( SUSE ): 5.6 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

* CVE-2017-8105 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2017-8287 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2017-8287 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2022-27404 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

* CVE-2022-27404 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2022-27405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:20204-1
Release Date: 2025-04-24T14:47:38Z
Rating: important

Topics%20covered

Topics Covered

security advisory security update buffer overflow important freetype2 SUSE Linux Micro

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here