p PatchFirst

PatchFirst · Latest vulnerabilities

skia-python vulnerabilities

Vulnerabilities published for skia-python in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-2mhw-8qcg-gr96

    High · CVSS 8.1Fix available

    skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version

    ### Impact The Linux wheels for skia-python vendor a vulnerable version of libfreetype that is affected by CVE-2025-27363 [1]. The root cause is a chain of unfortunate events: 1. skia-python builds wheels using pinned pypa/[email protected] [2] 2. cibuildwheel 2.21.3 in turn pins manylinux container images [3] 3. In these images, version 2.9.1-9.el8 of RedHat package freetype is *preinstalled*. This package version is vulnerable and has since been patched in 2.9.1-10. 4. During the skia-python Linux build, libfreetype is vendored from the system, resulting in skia-python.libs/libfreetype-29a7443c.so.6.16.1 [ To find the provenance of

    skia-python skia-pythonPython
    • Update to 144.0.post1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →