Linux · Security advisory · July 29, 2025

RLSA-2025:3407: freetype security update

RLSA-2025:3407, released July 29, 2025, fixes 1 CVE in freetype (version 0:2.10.4-10.el9_5). One of them is being exploited (CVE-2025-27363); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2025-27363
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2778
98th percentile

Fixed package versions

ProductReleaseFixed in
freetyperocky 90:2.10.4-10.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-27363 freetype-devel: FreeType is a free, high-quality, portable font engine that can open and manage font files 9.0 0.2778 KEVExploited
Showing 1 to 1 of 1 1