Re: The Hacker News / Regarding Security Advisory CVE-2025-27363

Werner LEMBERG <[email protected]> Thu, 13 Mar 2025 04:40:07 +0000 (UTC)

Newsgroups	gmane.comp.fonts.freetype.user
Message-ID	<[email protected]>

> I am reaching out to see if I can get a comment from FreeType on
> CVE-2025-27363, a security flaw that was recently disclosed by
> Meta/Facebook.
> 
> Is it also possible to shed some light on the exact version that
> addresses the problem?

See 

  https://lists.nongnu.org/archive/html/freetype-devel/2025-03/msg00000.html

In short: The fix has been incorporated since almost two years;
FreeType versions larger than 2.13.0 are no longer affected.


    Werner