Oval Definition:oval:com.redhat.rhsa:def:20227514
Revision Date:2022-11-08Version:636
Title:RHSA-2022:7514: fribidi security update (Moderate)
Description:FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.

Security Fix(es):

  • fribidi: Stack based buffer overflow (CVE-2022-25308)

  • fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309)

  • fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2022-25308
    CVE-2022-25309
    CVE-2022-25310
    RHSA-2022:7514
    Platform(s):Red Hat Enterprise Linux 8
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 8 is installed
  • OR Red Hat CoreOS 4 is installed
  • AND
  • fribidi is earlier than 0:1.0.4-9.el8
  • AND fribidi is signed with Red Hat redhatrelease2 key
  • fribidi-devel is earlier than 0:1.0.4-9.el8
  • AND fribidi-devel is signed with Red Hat redhatrelease2 key
  • BACK