CVE-2020-15999
CriticalKEVAdvisory
Published 20 Oct 2020In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.6
- base score, highest
- EPSS
- 0.443
- 99th percentile
- CISA KEV
- Listed
- since 3 Nov 2021
- Charts affected
- 417
- of 17,781 indexed, latest versions
- Container images
- 208
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
Red Hat Security Advisory: freetype security update
Carried by container images the latest versions of 417 of 17,781 indexed charts deploy, on 208 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| freetypedeb | 2.5.2-1ubuntu2.2, 2.5.2-1ubuntu2.8, 2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4+5 more | 2.5.2-1ubuntu2.8+esm2, 2.6.1-0.1ubuntu2.5, 2.6.3-3.2+deb9u2, 2.8.1-2ubuntu2.1+1 more | 135 |
| freetypeapk | 2.9.1-r2, 2.10.0-r0, 2.10.1-r0, 2.10.2-r0 | 2.9.1-r3, 2.10.0-r1, 2.10.1-r1, 2.10.4-r0 | 66 |
| chromium-browserdeb | 63.0.3239.84-0ubuntu0.16.04.1 | 86.0.4240.198-0ubuntu0.16.04.1 | 1 |
| freetyperpm | 2.8-12.el7_6.1, 2.8-14.el7, 2.9.1-4.el8 | 0:2.8-14.el7_9.1, 0:2.9.1-4.el8_2.1 | 7 |
- OSV records
- ALPINE-CVE-2020-15999UBUNTU-CVE-2020-15999RHSA-2020:4907RHSA-2020:4951DLA-2415-1DSA-4777-1
- Also known as
- RHSA-2020:4952, USN-4593-1, USN-4593-2
Charts affected
417 by stars
Container images carrying it
208 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| onosproject/ | 44914a8d4b3f | freetype | 2.8.1-2ubuntu2.1 | 1 |
| opendatacube/ | 1b90cdf68831 | freetype | 2.8.1-2ubuntu2.1 | 1 |
| openwhisk/ | b695a6ceb406 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| openwhisk/ | 63dc3d2a0904 | freetype | 2.9.1-3+deb10u2 | 1 |
| openwhisk/ | c80dba0de3aa | freetype | 2.8.1-2ubuntu2.1 | 1 |
| openzipkin/ | 672cbc94256b | freetype | 2.10.0-r1 | 1 |
| opsmx11/ | 5c50ca123d88 | freetype | 2.5.2-1ubuntu2.8+esm2 | 1 |
| pachyderm/ | 94e9a281e5a4 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| pachyderm/ | 2b27f41d4d02 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| paulczar/ | c7140cecd5f7 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| pe46dro/ | 09dfe3aa10f6 | freetype | 2.9.1-r3 | 1 |
| pecan/ | 73b2074f3fec | freetype | 2.9.1-3+deb10u2 | 1 |
| pedrocesarti/ | 14851f144f57 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| phntom/ | 85a2dfb83b11 | freetype | 2.9.1-3+deb10u2 | 1 |
| pnnlmiscscripts/ | 4eafeb809124 | freetype | 2.10.0-r1 | 1 |
| pnnlmiscscripts/ | bbb6940d849f | freetype | 2.10.1-r1 | 1 |
| pnnlmiscscripts/ | 2648032cb498 | freetype | 2.10.0-r1 | 1 |
| pnnlmiscscripts/ | 8af4c559fff0 | freetype | 2.10.1-r1 | 1 |
| raykrueger/ | c8baf3de57bb | freetype | 2.6.3-3.2+deb9u2 | 1 |
| richardchesterwood/ | 0b540a28f5a6 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| richardchesterwood/ | 36c43961214c | freetype | 2.6.3-3.2+deb9u2 | 1 |
| rodolpheche/ | 2328a9fce2bf | freetype | 2.9.1-3+deb10u2 | 1 |
| royalwang/ | df99e2499f91 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| rundeck/ | 4d64fe56f767 | freetype | 2.6.1-0.1ubuntu2.5 | 1 |
| rundeck/ | b13e8059ad72 | freetype | 2.6.1-0.1ubuntu2.5 | 1 |
| scrapinghub/ | a5f89bc84606 | freetype | 2.8.1-2ubuntu2.1 | 1 |
| sdandey/ | 04594ada18be | freetype | 2.9.1-r3 | 1 |
| sdandey/ | bef0f599737b | freetype | 2.9.1-r3 | 1 |
| seataio/ | ee1ed55f4144 | freetype | 2.9.1-r3 | 1 |
| seldonio/ | eea0d3f578ca | freetype | 2.9.1-r3 | 1 |
| sismics/ | f4b0ef019cf1 | freetype | 2.8.1-2ubuntu2.1 | 1 |
| stacksimplify/ | ead648280067 | freetype | 2.9.1-3+deb10u2 | 1 |
| stacksimplify/ | ce2b15139aca | freetype | 2.9.1-3+deb10u2 | 1 |
| swaggerapi/ | d434cac93813 | freetype | 2.10.0-r1 | 1 |
| tensorflow/ | 1e3172090703 | freetype | 2.6.1-0.1ubuntu2.5 | 1 |
| testhubio/ | e86c2db53be8 | freetype | 2.10.1-r1 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | chromium-browser freetype | 86.0.4240.198-0ubuntu0.16.04.1 2.6.1-0.1ubuntu2.5 | 1 |
| vectorim/ | 080e313abd37 | freetype | 2.10.4-r0 | 1 |
| voltha/ | e038acb950d3 | freetype | 2.8.1-2ubuntu2.1 | 1 |
| vromero/ | 408d6a46b153 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| wavefronthq/ | d1064d28f6eb | freetype | 2.8.1-2ubuntu2.1 | 1 |
| weblate/ | 82848df56ecd | freetype | 2.9.1-3+deb10u2 | 1 |
| xetusoss/ | 88f25242b9ee | freetype | 2.9.1-r3 | 1 |
| gcr.io/ | 0ee5f968d2ab | freetype | 2.10.1-r1 | 1 |
| ghcr.io/ | d8a0334cddfc | freetype | 2.9.1-3+deb10u2 | 1 |
| ghcr.io/ | c144bdd688d7 | freetype | 2.9.1-r3 | 1 |
| ghcr.io/ | d6e901ad0ebd | freetype | 2.9.1-3+deb10u2 | 1 |
| ghcr.io/ | 8caf5289fe73 | freetype | 0:2.9.1-4.el8_2.1 | 1 |
| ghcr.io/ | 451706815103 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| ghcr.io/ | 763daf9caf8e | freetype | 2.6.3-3.2+deb9u2 | 1 |