Public bug reported: A new release of freetype is available for merging from Debian.
Ubuntu: 2.14.3+dfsg-2ubuntu1 Debian Unstable: 2.14.3+dfsg-3 ### New Debian Changes ### freetype (2.14.3+dfsg-3) unstable; urgency=medium * debian/patches: Fix CVE-2026-95512 (Closes: #1149953). -- Hugh McMaster <[email protected]> Mon, 05 Oct 2026 22:05:47 +1100 ### Old Ubuntu Delta ### freetype (2.14.3+dfsg-2ubuntu1) stonking; urgency=medium * SECURITY UPDATE: DoS in CID font loader - debian/patches/CVE-2026-95512.patch: * src/cid/cidload.c (cid_read_subrs): Limit overlaps. in src/cid/cidload.c. - CVE-2026-95512 -- Marc Deslauriers <[email protected]> Mon, 05 Oct 2026 10:40:55 -0400 ** Affects: freetype (Ubuntu) Importance: Wishlist Status: New ** Tags: dcr-merge ** Changed in: freetype (Ubuntu) Importance: Undecided => Wishlist ** Changed in: freetype (Ubuntu) Milestone: None => ubuntu-26.11 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2171208 Title: Merge freetype 2.14.3+dfsg-3 from Debian for tenacious cycle To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freetype/+bug/2171208/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
