Linux · Security advisory · March 31, 2025

RHSA-2025:3407: Security update for 2 packages

RHSA-2025:3407, released March 31, 2025, fixes 1 CVE across 2 products. One of them is being exploited (CVE-2025-27363); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2025-27363
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2778
98th percentile

Fixed package versions

ProductReleaseFixed in
freetypeRHEL 90:2.10.4-10.el9_5
freetype-develRHEL 90:2.10.4-10.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-27363 freetype-devel: FreeType is a free, high-quality, portable font engine that can open and manage font files 9.0 0.2778 KEVExploited
Showing 1 to 1 of 1 1