Most recent entries from all

ALSA-2022:7514 — Moderate: fribidi security update

Affected: AlmaLinux:8: fribidi, AlmaLinux:8: fribidi-devel

FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.

Security Fix(es):

* fribidi: Stack based buffer overflow (CVE-2022-25308) * fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309) * fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-02660

Withdrawn: BELL-CVE-2022-25309 — CVE-2022-25309 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0969

EUVD-2026-14490

fkie_cve-2022-25309

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.

GHSA-4fjx-j6jj-8pm5

gsd-2022-25309

msrc_CVE-2022-25309 — A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() functio…

msrc_CVE-2022-25309

OESA-2022-1923 — fribidi security update

Affected: openEuler:20.03-LTS-SP1: fribidi, openEuler:20.03-LTS-SP3: fribidi, openEuler:22.03-LTS: fribidi

A library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way; while the text data itself is always written in logical order and display in a different direction . Security Fix(es): A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.(CVE-2022-25308) A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.(CVE-2022-25309) A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.(CVE-2022-25310)

RHSA-2022:7514 — Red Hat Security Advisory: fribidi security update

fribidi: Stack based buffer overflow fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode fribidi: SEGV in fribidi_remove_bidi_marks

SUSE-SU-2022:1844-1 — Security update for fribidi

Security update for fribidi

UBUNTU-CVE-2022-25309

Affected: Ubuntu:14.04:LTS: fribidi, Ubuntu:Pro:16.04:LTS: fribidi, Ubuntu:18.04:LTS: fribidi, Ubuntu:20.04:LTS: fribidi, Ubuntu:22.04:LTS: fribidi

WID-SEC-W-2022-2044 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.