Read the docs
Red Hat Security Advisory

RHSA-2022:8011

fribidi security update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2022-09001 CVE-2022-25308 · GHSA-p3q8-prqm-8535

Stack-based buffer overflow in fribidi

Priority LOW 35

A stack-based buffer overflow flaw was found in the Fribidi package.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00542 Published 2022-09-06 Partial fix CWE-121
TI-2022-09003 CVE-2022-25310 · GHSA-rmjj-m2vr-q2x2

Memory corruption in fribidi

Priority LOW 25

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00484 Published 2022-09-06 Partial fix CWE-119
TI-2022-09002 CVE-2022-25309 · GHSA-4fjx-j6jj-8pm5

Heap-based buffer overflow in fribidi

Priority LOW 25

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0051 Published 2022-09-06 Partial fix CWE-122