CVE-2020-15999
CriticalKEVAdvisory
Published 20 Oct 2020In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.6
- base score, highest
- EPSS
- 0.443
- 99th percentile
- CISA KEV
- Listed
- since 3 Nov 2021
- Charts affected
- 417
- of 17,781 indexed, latest versions
- Container images
- 208
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
Red Hat Security Advisory: freetype security update
Carried by container images the latest versions of 417 of 17,781 indexed charts deploy, on 208 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| freetypedeb | 2.5.2-1ubuntu2.2, 2.5.2-1ubuntu2.8, 2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4+5 more | 2.5.2-1ubuntu2.8+esm2, 2.6.1-0.1ubuntu2.5, 2.6.3-3.2+deb9u2, 2.8.1-2ubuntu2.1+1 more | 135 |
| freetypeapk | 2.9.1-r2, 2.10.0-r0, 2.10.1-r0, 2.10.2-r0 | 2.9.1-r3, 2.10.0-r1, 2.10.1-r1, 2.10.4-r0 | 66 |
| chromium-browserdeb | 63.0.3239.84-0ubuntu0.16.04.1 | 86.0.4240.198-0ubuntu0.16.04.1 | 1 |
| freetyperpm | 2.8-12.el7_6.1, 2.8-14.el7, 2.9.1-4.el8 | 0:2.8-14.el7_9.1, 0:2.9.1-4.el8_2.1 | 7 |
- OSV records
- ALPINE-CVE-2020-15999UBUNTU-CVE-2020-15999RHSA-2020:4907RHSA-2020:4951DLA-2415-1DSA-4777-1
- Also known as
- RHSA-2020:4952, USN-4593-1, USN-4593-2
Charts affected
417 by stars
Container images carrying it
208 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 3e373fd5b8d4 | freetype | 2.6.3-3.2+deb9u2 | 86 |
| flyway/ | 22d97ceb0c47 | freetype | 2.8.1-2ubuntu2.1 | 79 |
| ghcr.io/ | ae2268dcc930 | freetype | 2.9.1-3+deb10u2 | 33 |
| library/ | ce85468c5bad | freetype | 2.6.3-3.2+deb9u2 | 7 |
| ghcr.io/ | 205961b09a80 | freetype | 2.9.1-3+deb10u2 | 5 |
| grafana/ | ab415470454b | freetype | 2.6.3-3.2+deb9u2 | 4 |
| hyperledger/ | 4ce6f43ded2e | freetype | 2.6.1-0.1ubuntu2.5 | 4 |
| hyperledger/ | f6c724592abf | freetype | 2.6.1-0.1ubuntu2.5 | 4 |
| apache/ | e8b7c4ddd069 | freetype | 2.9.1-r3 | 3 |
| apache/ | 0bd3b25c4be4 | freetype | 2.9.1-r3 | 3 |
| cankush625/ | 9479f73bab03 | freetype | 2.10.1-r1 | 3 |
| omecproject/ | d59ccb138ffb | freetype | 2.6.1-0.1ubuntu2.5 | 3 |
| ghcr.io/ | 279eb855e6c7 | freetype | 2.9.1-3+deb10u2 | 3 |
| amancevice/ | 12a0a9e66550 | freetype | 2.9.1-3+deb10u2 | 2 |
| apachepulsar/ | b341ef76a852 | freetype | 2.9.1-r3 | 2 |
| fjvela/ | a8ebe5ca13fc | freetype | 2.6.3-3.2+deb9u2 | 2 |
| fjvela/ | 3c840aebce22 | freetype | 2.6.3-3.2+deb9u2 | 2 |
| gradiant/ | c33d53913869 | freetype | 2.9.1-r3 | 2 |
| gradiant/ | 97657d56e927 | freetype | 2.10.0-r1 | 2 |
| grafana/ | d66b41cf7e05 | freetype | 2.6.3-3.2+deb9u2 | 2 |
| library/ | 5aa8400b4b3b | freetype | 2.8.1-2ubuntu2.1 | 2 |
| library/ | 6fff55753e3b | freetype | 2.9.1-3+deb10u2 | 2 |
| library/ | b1d09e971889 | freetype | 2.6.3-3.2+deb9u2 | 2 |
| martinaif/ | 43bc40a3da0e | freetype | 2.9.1-3+deb10u2 | 2 |
| martinaif/ | f07fbe15e5b5 | freetype | 2.9.1-3+deb10u2 | 2 |
| mojaloop/ | 5f025fe3554b | freetype | 2.9.1-r3 | 2 |
| mojaloop/ | c338940807c9 | freetype | 2.9.1-r3 | 2 |
| mojaloop/ | 89cb2e16a2a3 | freetype | 2.9.1-r3 | 2 |
| nachomillangarcia/ | e4ce056f2d6d | freetype | 2.6.3-3.2+deb9u2 | 2 |
| neilpeterson/ | 84062718347c | freetype | 2.6.3-3.2+deb9u2 | 2 |
| neuvector/ | f1b7d666eae0 | freetype | 2.10.1-r1 | 2 |
| openmf/ | 496b60a51f28 | freetype | 2.9.1-3+deb10u2 | 2 |
| rodolpheche/ | 3be08a386092 | freetype | 2.6.3-3.2+deb9u2 | 2 |
| solsson/ | 6f82e2b0464f | freetype | 2.6.3-3.2+deb9u2 | 2 |
| statsd/ | dab129e74c25 | freetype | 2.6.3-3.2+deb9u2 | 2 |
| weblate/ | 69c160d37a3c | freetype | 2.9.1-3+deb10u2 | 2 |
| wurstmeister/ | 7a7fd44a7210 | freetype | 2.5.2-1ubuntu2.8+esm2 | 2 |
| adferrand/ | 6fea97b02758 | freetype | 2.10.4-r0 | 1 |
| afrank/ | d463c37b08d7 | freetype | 2.9.1-3+deb10u2 | 1 |
| amancevice/ | c8c04bfe3d66 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| apachepulsar/ | 4db6ff0b4045 | freetype | 2.9.1-3+deb10u2 | 1 |
| apache/ | e2be712fc4f4 | freetype | 2.9.1-r3 | 1 |
| apache/ | 1bd5756f6273 | freetype | 2.9.1-r3 | 1 |
| apache/ | 641237e0299b | freetype | 2.9.1-r3 | 1 |
| apache/ | 67d50e4deff4 | freetype | 2.9.1-r3 | 1 |
| apicurio/ | 44eeddd3562c | freetype | 2.10.1-r1 | 1 |
| bivas/ | 05545994f806 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| bryanalves/ | 95f73dce8b21 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| bryanalves/ | af47dfbb9413 | freetype | 2.6.3-3.2+deb9u2 | 1 |
| camptocamp/ | 35c91d5fda04 | freetype | 2.9.1-3+deb10u2 | 1 |