CVE-2022-27406

medium
Published 2022-11-15 · Modified 2022-11-17
CVSS v3
CVSS v2
VIR risk
5.5

Description

Moderate: freetype security update

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-8340.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7745.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2077991

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2077989

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2077985

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7745

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:8340

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2022-27406

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2022-27406.html

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7745

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:8340

OS impact

OSVersionStatusFixed in
redhat rhel9fixed
rockylinux rocky8fixed
suse slesaffected
debian debianbookwormfixed2.11.1+dfsg-2
debian debianbullseyefixed2.10.4+dfsg-1+deb11u1
debian debianforkyfixed2.11.1+dfsg-2
debian debiansidfixed2.11.1+dfsg-2
debian debiantrixiefixed2.11.1+dfsg-2
rockylinux rocky9fixed

References

Verify integrity in audit chain (admin only). AS-IS.