ELSA-2022-7514 — Moderate: fribidi security update (Oracle Linux 8)

Summary

[1.0.4-9]
- Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
- Drop --disable-docs from %configure. no such options available.

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	fribidi	0:1.0.4-9.el8
Oracle Linux · 8	fribidi-devel	0:1.0.4-9.el8

Vulnerabilities 3

Unscored —

CVE-2022-25308

A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially c…

fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine

Sep 6, 2022
Unscored —

CVE-2022-25309

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() functio…

fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine

Sep 6, 2022
Unscored —

CVE-2022-25310

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function …

fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine

Sep 6, 2022

Moderate: fribidi security update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 3

A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially c…

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() functio…

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function …