harfbuzz security update

2022-11-2200:00:00

linux.oracle.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

14.1%

JSON

[2.7.4-8]

Resolves:rh#2103849
Update tests.yaml
[2.7.4-7]
Resolves:rh#2103849 CVE-2022-33068
Fix Covscan compiler warning for inclusion of parenthesis
Update tests.yaml
[2.7.4-6]
Resolves:rh#2103849 CVE-2022-33068
harfbuzz: integer overflow in the component hb-ot-shape-fallback.c

OSVersionArchitecturePackageVersionFilename
oracle linux9srcharfbuzz< 2.7.4-8.el9harfbuzz-2.7.4-8.el9.src.rpm
oracle linux9aarch64harfbuzz< 2.7.4-8.el9harfbuzz-2.7.4-8.el9.aarch64.rpm
oracle linux9aarch64harfbuzz-devel< 2.7.4-8.el9harfbuzz-devel-2.7.4-8.el9.aarch64.rpm
oracle linux9aarch64harfbuzz-icu< 2.7.4-8.el9harfbuzz-icu-2.7.4-8.el9.aarch64.rpm
oracle linux9srcharfbuzz< 2.7.4-8.el9harfbuzz-2.7.4-8.el9.src.rpm
oracle linux9i686harfbuzz< 2.7.4-8.el9harfbuzz-2.7.4-8.el9.i686.rpm
oracle linux9x86_64harfbuzz< 2.7.4-8.el9harfbuzz-2.7.4-8.el9.x86_64.rpm
oracle linux9i686harfbuzz-devel< 2.7.4-8.el9harfbuzz-devel-2.7.4-8.el9.i686.rpm
oracle linux9x86_64harfbuzz-devel< 2.7.4-8.el9harfbuzz-devel-2.7.4-8.el9.x86_64.rpm
oracle linux9i686harfbuzz-icu< 2.7.4-8.el9harfbuzz-icu-2.7.4-8.el9.i686.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	harfbuzz	< 2.7.4-8.el9	harfbuzz-2.7.4-8.el9.src.rpm
oracle linux	9	aarch64	harfbuzz	< 2.7.4-8.el9	harfbuzz-2.7.4-8.el9.aarch64.rpm
oracle linux	9	aarch64	harfbuzz-devel	< 2.7.4-8.el9	harfbuzz-devel-2.7.4-8.el9.aarch64.rpm
oracle linux	9	aarch64	harfbuzz-icu	< 2.7.4-8.el9	harfbuzz-icu-2.7.4-8.el9.aarch64.rpm
oracle linux	9	src	harfbuzz	< 2.7.4-8.el9	harfbuzz-2.7.4-8.el9.src.rpm
oracle linux	9	i686	harfbuzz	< 2.7.4-8.el9	harfbuzz-2.7.4-8.el9.i686.rpm
oracle linux	9	x86_64	harfbuzz	< 2.7.4-8.el9	harfbuzz-2.7.4-8.el9.x86_64.rpm
oracle linux	9	i686	harfbuzz-devel	< 2.7.4-8.el9	harfbuzz-devel-2.7.4-8.el9.i686.rpm
oracle linux	9	x86_64	harfbuzz-devel	< 2.7.4-8.el9	harfbuzz-devel-2.7.4-8.el9.x86_64.rpm
oracle linux	9	i686	harfbuzz-icu	< 2.7.4-8.el9	harfbuzz-icu-2.7.4-8.el9.i686.rpm