Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 2077991 (CVE-2022-27405)

Summary:	CVE-2022-27405 FreeType: Segmentation violation via FNT_Size_Request
Product:	[Other] Security Response	Reporter:	Sage McTaggart <amctagga>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	ajax, caillon+fedoraproject, erik-fedora, fonts-bugs, gnome-sig, gparvin, jramanat, manisandro, mclasen, mkasik, njean, pahickey, rh-spice-bugs, rhughes, rjones, rstrode, sandmann, stcannon
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	freetype 2.12.0	Doc Type:	If docs needed, set a value
Doc Text:	A segmentation fault was found in the FreeType library. This flaw allows an attacker to attempt access to a memory location in a way that could cause an application to halt or crash, leading to a denial of service.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-12-05 04:24:05 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2079255, 2079256, 2079261, 2079262, 2079263
Bug Blocks:

Description Sage McTaggart 2022-04-22 19:07:55 UTC

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.

http://freetype.com
https://gitlab.freedesktop.org/freetype/freetype/-/issues/1139

Comment 1 TEJ RATHI 2022-04-27 09:55:24 UTC

Created freetype tracking bugs for this issue:

Affects: fedora-all [bug 2079255]


Created mingw-freetype tracking bugs for this issue:

Affects: fedora-all [bug 2079256]

Comment 4 errata-xmlrpc 2022-11-08 10:21:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2022:7745 https://access.redhat.com/errata/RHSA-2022:7745

Comment 5 errata-xmlrpc 2022-11-15 11:00:01 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2022:8340 https://access.redhat.com/errata/RHSA-2022:8340

Comment 6 Product Security DevOps Team 2022-12-05 04:24:02 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-27405

Comment 8 errata-xmlrpc 2024-01-24 16:47:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:0420 https://access.redhat.com/errata/RHSA-2024:0420