FreeType sec bug - Chrome exploited

https://sourceforge.net/projects/freety... ( FreeType )

New Chrome 0-day Under Active Attacks – Update Your Browser Now (thehackernews.com)

Če je ranljiv še kaki drugi razširjen softver, pa bi bilo dobro vedeti.



-------

CHANGES BETWEEN 2.10.3 and 2.10.4

I. IMPORTANT BUG FIXES

- A heap buffer overflow has been found in the handling of embedded
PNG bitmaps, introduced in FreeType version 2.6.

https://cve.mitre.org/cgi-bin/cvename.c...

If you use option FT_CONFIG_OPTION_USE_PNG you should upgrade
immediately.

CVE-2020-15999

.