{"id":"CVE-2018-6942","aliases":["ALPINE-CVE-2018-6942","BELL-CVE-2018-6942","DEBIAN-CVE-2018-6942","EUVD-2018-18686","GHSA-pjfg-6mwr-j367","MGASA-2018-0140","SUSE-SU-2020:1353-1","openSUSE-SU-2020:0704-1","openSUSE-SU-2024:10770-1"],"status":"published","title":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the...","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02084,"percentile":0.81692,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2018-02-13T05:00:00Z","modified":"2026-11-01T02:45:09Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"freetype","fixed_in":["2.7-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"freetype","fixed_in":["2.7.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"freetype","fixed_in":["2.8.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"freetype","fixed_in":["2.9-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freetype","fixed_in":["2.9.1-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freetype","fixed_in":["2.9.1-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freetype","fixed_in":["2.9.1-3"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"freetype2","fixed_in":["2.7.1-2.2.mga6","2.7.1-2.2.mga6.tainted"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"freetype2","fixed_in":["2.10.1-4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"freetype2","fixed_in":["2.10.1-lp151.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ft2demos","fixed_in":["2.10.1-lp151.4.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-3"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-2.2.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-2.2.mga6.tainted"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-lp151.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-lp151.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-1.2"}]}],"bundled":4}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"freetype","product":"freetype"}],"references":[{"url":"https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=29c759284e305ec428703c9a5831d0b1fc3497ef","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5736","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3572-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00054.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6942"},{"url":"https://github.com/advisories/GHSA-pjfg-6mwr-j367"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-6942","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-6942","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-6942","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0140.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22611","tags":["report"]},{"url":"https://usn.ubuntu.com/usn/usn-3572-1","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201353-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1079603","tags":["report"]},{"url":"https://bugzilla.suse.com/1091109","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6942","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7HRHABTHHJKCUCCIG4MN5VYZ47BLAVKH/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15999","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-6942","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.","status":"published","published":"2018-02-13T05:00:00Z","modified":"2024-08-05T06:17:17.091Z","updated_at":"2026-11-02T14:35:05.961936Z"}],"euvd":[{"id":"EUVD-2018-18686","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.","status":"published","published":"2018-02-13T05:00:00Z","modified":"2024-08-05T06:17:17Z","updated_at":"2026-11-03T02:40:07.110514Z"}],"ghsa":[{"id":"GHSA-pjfg-6mwr-j367","title":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the...","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.","status":"published","published":"2022-05-13T01:12:00Z","modified":"2023-02-01T05:03:48Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:50:06.238998Z"}],"nvd":[{"id":"CVE-2018-6942","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.","status":"published","published":"2018-02-13T05:29:00.267Z","modified":"2026-06-17T02:02:29.537Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:22.897995Z"}],"osv":[{"id":"ALPINE-CVE-2018-6942","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.","status":"published","published":"2018-02-13T05:29:00.267Z","modified":"2026-10-23T17:17:55.287101537Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2018-6942","title":"CVE-2018-6942 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:41.920372Z","modified":"2026-01-26T09:48:55.114216Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-6942","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.","status":"published","published":"2018-02-13T05:29:00.267Z","modified":"2026-11-08T10:45:05.75679779Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-08T11:04:08.386699Z"},{"id":"DEBIAN-CVE-2018-6942","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.","status":"published","published":"2018-02-13T05:29:00.267Z","modified":"2026-10-23T18:03:08.088571668Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"MGASA-2018-0140","title":"Updated freetype2 packages fix security vulnerability","description":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer\ndereference in the Ins_GETVARIATION() function within ttinterp.c could\nlead to DoS via a crafted font file (CVE-2018-6942).\n","status":"published","published":"2018-02-24T23:25:24Z","modified":"2026-04-16T06:25:38.88965914Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2020:0704-1","title":"Security update for freetype2","description":"This update for freetype2 to version 2.10.1 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-6942: Fixed a NULL pointer dereference within ttinerp.c (bsc#1079603).\n\nNon-security issues fixed:\n\n- Update to version 2.10.1\n  * The bytecode hinting of OpenType variation fonts was flawed, since\n    the data in the `CVAR' table wasn't correctly applied.\n  * Auto-hinter support for Mongolian.\n  * The handling of  the default character in PCF fonts as  introduced\n    in version 2.10.0 was partially broken, causing premature abortion\n    of charmap iteration for many fonts.\n  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments\n    twice in a row, the function  returned an incorrect error code the\n    second time.\n  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug\n    introduced in version 2.10.0).\n  * Increased  precision  while  computing  OpenType  font   variation\n    instances.\n  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly\n    changed to make  it faster.  This can cause  very subtle rendering\n    changes, which aren't noticeable by the eye, however.\n  * The  auto-hinter  now  disables hinting  if there  are blue  zones\n    defined for a `style' (i.e., a certain combination of a script and\n    its related typographic features) but the font doesn't contain any\n    characters needed to set up at least one blue zone.\n- Add tarball signatures and freetype2.keyring\n\n- Update to version 2.10.0\n  * A bunch of new functions has been added to access and process\n    COLR/CPAL data of OpenType fonts with color-layered glyphs.\n  * As a GSoC 2018 project, Nikhil Ramakrishnan completely\n    overhauled and modernized the API reference.\n  * The logic for computing the global ascender, descender, and\n    height of OpenType fonts has been slightly adjusted for\n    consistency.\n  * `TT_Set_MM_Blend' could fail if called repeatedly with the same\n    arguments.\n  * The precision of handling deltas in Variation Fonts has been\n    increased.The problem did only show up with multidimensional\n    designspaces.\n  * New function `FT_Library_SetLcdGeometry' to set up the geometry\n    of LCD subpixels.\n  * FreeType now uses the `defaultChar' property of PCF fonts to set\n    the  glyph for  the undefined  character  at glyph  index 0  (as\n    FreeType already does for all other supported font formats).  As\n    a consequence, the order of glyphs of a PCF font if accessed\n    with  FreeType can be different now compared to previous\n    versions.\n    This change doesn't affect PCF font access with cmaps.\n  * `FT_Select_Charmap' has been changed to allow  parameter value\n    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT\n    formats to access built-in cmaps that don't have a predefined\n    `FT_Encoding' value.\n  * A previously reserved field in the `FT_GlyphSlotRec' structure\n    now holds the glyph index.\n  * The usual round of fuzzer bug fixes to better reject malformed\n    fonts.\n  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have\n    been removed.These two functions were public by oversight only\n    and were never documented.\n  * A new function `FT_Error_String' returns descriptions of error\n    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is\n    defined.\n  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new\n    functions limited to Adobe MultiMaster fonts to directly set and\n    get the weight vector.\n\n- Enable subpixel rendering with infinality config:\n\n- Re-enable freetype-config, there is just too many fallouts. \n\n- Update to version 2.9.1\n  * Type 1 fonts containing flex features were not rendered\n    correctly (bug introduced in version 2.9).\n  * CVE-2018-6942: Older FreeType versions can crash with certain\n    malformed variation fonts.\n  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.\n  * Emboldening of bitmaps didn't work correctly sometimes, showing\n    various artifacts (bug introduced in version 2.8.1).\n  * The auto-hinter script ranges have  been updated for Unicode 11.\n    No support for new scripts have been added, however,  with the\n    exception of Georgian Mtavruli.\n- freetype-config is now deprecated by upstream and not enabled\n  by default.\n\n- Update to version 2.10.1\n  * The `ftmulti' demo program now  supports multiple hidden axes with\n    the same name tag.\n  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option\n    to emulate a sequence of keystrokes at start-up.\n  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a\n    PNG file.\n  * The bytecode debugger, `ttdebug',  now supports variation TrueType\n    fonts; a variation font instance can be selected with the new `-d'\n    command line option.\n- Add tarball signatures and freetype2.keyring\n\n- Update to version 2.10.0\n  * The  `ftdump' demo  program has new options `-c'  and `-C'  to\n    display charmaps in compact and detailed format, respectively.\n    Option `-V' has been removed.\n  * The `ftview', `ftstring', and `ftgrid' demo programs use a new\n    command line option `-d' to specify the program window's width,\n    height, and color depth.\n  * The `ftview' demo program now displays red boxes for zero-width\n    glyphs.\n  * `ftglyph' has limited support to display fonts with\n    color-layered glyphs.This will be improved later on.\n  * `ftgrid' can now display bitmap fonts also.\n  * The `ttdebug' demo program has a new option `-f' to select a\n    member of a TrueType collection (TTC).\n  * Other various improvements to the demo programs.\n\n- Remove 'Supplements: fonts-config' to avoid accidentally pulling\n  in Qt dependencies on some non-Qt based desktops.(bsc#1091109)\n  fonts-config is fundamental but ft2demos seldom installs by end users.\n  only fonts-config maintainers/debuggers may use ft2demos along to\n  debug some issues. \n\n- Update to version 2.9.1\n  * No changelog upstream.\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-05-23T18:14:34Z","modified":"2026-02-04T03:59:37.949485Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10770-1","title":"freetype2-devel-2.11.0-1.2 on GA media","description":"These are all security issues fixed in the freetype2-devel-2.11.0-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:37:49.249719Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:1353-1","title":"Security update for freetype2","description":"This update for freetype2 to version 2.10.1 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-6942: Fixed a NULL pointer dereference within ttinerp.c (bsc#1079603).\n\nNon-security issues fixed:\n\n- Update to version 2.10.1\n  * The bytecode hinting of OpenType variation fonts was flawed, since\n    the data in the `CVAR' table wasn't correctly applied.\n  * Auto-hinter support for Mongolian.\n  * The handling of  the default character in PCF fonts as  introduced\n    in version 2.10.0 was partially broken, causing premature abortion\n    of charmap iteration for many fonts.\n  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments\n    twice in a row, the function  returned an incorrect error code the\n    second time.\n  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug\n    introduced in version 2.10.0).\n  * Increased  precision  while  computing  OpenType  font   variation\n    instances.\n  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly\n    changed to make  it faster.  This can cause  very subtle rendering\n    changes, which aren't noticeable by the eye, however.\n  * The  auto-hinter  now  disables hinting  if there  are blue  zones\n    defined for a `style' (i.e., a certain combination of a script and\n    its related typographic features) but the font doesn't contain any\n    characters needed to set up at least one blue zone.\n- Add tarball signatures and freetype2.keyring\n\n- Update to version 2.10.0\n  * A bunch of new functions has been added to access and process\n    COLR/CPAL data of OpenType fonts with color-layered glyphs.\n  * As a GSoC 2018 project, Nikhil Ramakrishnan completely\n    overhauled and modernized the API reference.\n  * The logic for computing the global ascender, descender, and\n    height of OpenType fonts has been slightly adjusted for\n    consistency.\n  * `TT_Set_MM_Blend' could fail if called repeatedly with the same\n    arguments.\n  * The precision of handling deltas in Variation Fonts has been\n    increased.The problem did only show up with multidimensional\n    designspaces.\n  * New function `FT_Library_SetLcdGeometry' to set up the geometry\n    of LCD subpixels.\n  * FreeType now uses the `defaultChar' property of PCF fonts to set\n    the  glyph for  the undefined  character  at glyph  index 0  (as\n    FreeType already does for all other supported font formats).  As\n    a consequence, the order of glyphs of a PCF font if accessed\n    with  FreeType can be different now compared to previous\n    versions.\n    This change doesn't affect PCF font access with cmaps.\n  * `FT_Select_Charmap' has been changed to allow  parameter value\n    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT\n    formats to access built-in cmaps that don't have a predefined\n    `FT_Encoding' value.\n  * A previously reserved field in the `FT_GlyphSlotRec' structure\n    now holds the glyph index.\n  * The usual round of fuzzer bug fixes to better reject malformed\n    fonts.\n  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have\n    been removed.These two functions were public by oversight only\n    and were never documented.\n  * A new function `FT_Error_String' returns descriptions of error\n    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is\n    defined.\n  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new\n    functions limited to Adobe MultiMaster fonts to directly set and\n    get the weight vector.\n\n- Enable subpixel rendering with infinality config:\n\n- Re-enable freetype-config, there is just too many fallouts. \n\n- Update to version 2.9.1\n  * Type 1 fonts containing flex features were not rendered\n    correctly (bug introduced in version 2.9).\n  * CVE-2018-6942: Older FreeType versions can crash with certain\n    malformed variation fonts.\n  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.\n  * Emboldening of bitmaps didn't work correctly sometimes, showing\n    various artifacts (bug introduced in version 2.8.1).\n  * The auto-hinter script ranges have  been updated for Unicode 11.\n    No support for new scripts have been added, however,  with the\n    exception of Georgian Mtavruli.\n- freetype-config is now deprecated by upstream and not enabled\n  by default.\n\n- Update to version 2.10.1\n  * The `ftmulti' demo program now  supports multiple hidden axes with\n    the same name tag.\n  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option\n    to emulate a sequence of keystrokes at start-up.\n  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a\n    PNG file.\n  * The bytecode debugger, `ttdebug',  now supports variation TrueType\n    fonts; a variation font instance can be selected with the new `-d'\n    command line option.\n- Add tarball signatures and freetype2.keyring\n\n- Update to version 2.10.0\n  * The  `ftdump' demo  program has new options `-c'  and `-C'  to\n    display charmaps in compact and detailed format, respectively.\n    Option `-V' has been removed.\n  * The `ftview', `ftstring', and `ftgrid' demo programs use a new\n    command line option `-d' to specify the program window's width,\n    height, and color depth.\n  * The `ftview' demo program now displays red boxes for zero-width\n    glyphs.\n  * `ftglyph' has limited support to display fonts with\n    color-layered glyphs.This will be improved later on.\n  * `ftgrid' can now display bitmap fonts also.\n  * The `ttdebug' demo program has a new option `-f' to select a\n    member of a TrueType collection (TTC).\n  * Other various improvements to the demo programs.\n\n- Remove 'Supplements: fonts-config' to avoid accidentally pulling\n  in Qt dependencies on some non-Qt based desktops.(bsc#1091109)\n  fonts-config is fundamental but ft2demos seldom installs by end users.\n  only fonts-config maintainers/debuggers may use ft2demos along to\n  debug some issues. \n\n- Update to version 2.9.1\n  * No changelog upstream.\n","status":"published","published":"2020-05-20T11:02:36Z","modified":"2025-05-02T04:08:23.966193Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}