Back Linuxsecurity Ubuntu 25.10 FreeType Key Integer Arithmetic Information Leak USN-8086
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: FreeType could be made to leak sensitive information. Software Description: - freetype: FreeType 2 is a font engine library Details: It was discovered that FreeType did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to leak sensitive information.
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: FreeType could be made to leak sensitive information. Software Description: - freetype: FreeType 2 is a font engine library Details: It was discovered that FreeType did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to leak sensitive information.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libfreetype-dev 2.13.3+dfsg-1ubuntu0.1 libfreetype6 2.13.3+dfsg-1ubuntu0.1 Ubuntu 24.04 LTS libfreetype-dev 2.13.2+dfsg-1ubuntu0.1 libfreetype6 2.13.2+dfsg-1ubuntu0.1 In general, a standard system update will make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libfreetype-dev 2.13.3+dfsg-1ubuntu0.1 libfreetype6 2.13.3+dfsg-1ubuntu0.1 Ubuntu 24.04 LTS libfreetype-dev 2.13.2+dfsg-1ubuntu0.1 libfreetype6 2.13.2+dfsg-1ubuntu0.1 In general, a standard system update will make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
