id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
14153	freetype-2.10.4	ken@…	ken@…	"New release: per [https://www.freetype.org/]

FreeType 2.10.4

2020-10-20

This is an emergency release, fixing a severe vulnerability in embedded PNG bitmap handling (see here for more).

All users should update immediately.

According to phoronix this is for CVE-2020-15999 which is apparently a heap buffer overflow and has been present since freetype-2.6 (which was 5 years ago)."	enhancement	closed	high	10.1	BOOK	SVN	medium	fixed