{"id":"CLSA-2026-1787310855","summary":"Fix CVE(s): CVE-2025-27363","details":"   * SECURITY UPDATE: out-of-bounds write when parsing composite subglyphs\n     of TrueType GX / variable fonts (ELSCVE-171535)\n     - debian/patches-freetype/CVE-2025-27363.patch: reject a subglyph count\n       that truncates to a negative short in load_truetype_glyph before it\n       is used to size the outline arrays in src/truetype/ttgload.c.\n     - CVE-2025-27363","modified":"2026-10-26T09:31:34.047258255Z","published":"2026-08-21T11:14:26Z","upstream":["CVE-2025-27363"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787310855.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27363"}],"affected":[{"package":{"name":"freetype2-demos","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/freetype2-demos?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787310855.json"}},{"package":{"name":"libfreetype6","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libfreetype6?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787310855.json"}},{"package":{"name":"libfreetype6-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libfreetype6-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787310855.json"}}],"schema_version":"1.9.0"}