Red Hat Security Advisory

RHSA-2022:8384

harfbuzz security update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) harfbuzz-2.7.4-8.el9, harfbuzz-devel-2.7.4-8.el9, harfbuzz-icu-2.7.4-8.el9
Red Hat Enterprise Linux BaseOS (v. 9) harfbuzz-2.7.4-8.el9

Fixes 1 record

TI-2022-14547 CVE-2022-33068 · GHSA-cq67-chj5-8385

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows…

LOW 27

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01189 Published 2022-06-22 Fixed CWE-190