Medium ELSA-2022-8011 3 CVEs

Moderate: fribidi security update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[1.0.10-6.el9.2]
- Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	fribidi	0:1.0.10-6.el9.2
Oracle Linux · 9	fribidi-devel	0:1.0.10-6.el9.2

Vulnerabilities 3

Unscored —

CVE-2022-25308

A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially c…

fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine

Sep 6, 2022
Unscored —

CVE-2022-25309

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() functio…

fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine

Sep 6, 2022
Unscored —

CVE-2022-25310

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function …

fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine

Sep 6, 2022