Medium ELSA-2024-2980 1 CVE

Moderate: harfbuzz security update (Oracle Linux 8)

Published May 23, 2024 · Updated May 23, 2024

Ecosystem: Oracle Linux

Summary

[1.7.5-4]
- Resolves:RHEL-8400 allows attackers to trigger O(n^2) growth via consecutive marks

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	harfbuzz	0:1.7.5-4.el8
Oracle Linux · 8	harfbuzz-devel	0:1.7.5-4.el8
Oracle Linux · 8	harfbuzz-icu	0:1.7.5-4.el8

Vulnerabilities 1

High 7.5

CVE-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks duri…

openjdk-lts openjdk-9 openjdk-13 openjdk11 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 4, 2023