Medium ELSA-2024-2410 1 CVE

Moderate: harfbuzz security update (Oracle Linux 9)

Published May 2, 2024 · Updated May 2, 2024

Ecosystem: Oracle Linux

Summary

[2.7.4-10]
- Resolves:RHEL-2268 Fix CI tests results

[2.7.4-9]
- Resolves:RHEL-2268 CVE-2023-25193

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	harfbuzz	0:2.7.4-10.el9
Oracle Linux · 9	harfbuzz-devel	0:2.7.4-10.el9
Oracle Linux · 9	harfbuzz-icu	0:2.7.4-10.el9

Vulnerabilities 1

High 7.5

CVE-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks duri…

openjdk-lts openjdk-9 openjdk-13 openjdk11 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 4, 2023