SUSE-SU-2022:1898-1 Security update for fribidi

This update for fribidi fixes the following issues: - CVE-2022-25308: Fixed stack out of bounds read bsc1196147. - CVE-2022-25309: Fixed heap-buffer-overflow in fribidicaprtltounicode bsc1196148. - CVE-2022-25310: Fixed NULL pointer dereference in fribidiremovebidimarks bsc1196150...

SUSE SLES12 Security Update : fribidi (SUSE-SU-2022:1845-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1845-1 advisory. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted fil...

SUSE SLED15 / SLES15 Security Update : fribidi (SUSE-SU-2022:1844-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1844-1 advisory. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a...

SUSE: Security Advisory (SUSE-SU-2022:1845-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for fribidi (SUSE-SU-2022:1844-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:1844-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5366-1: FriBidi vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that FriBidi incorrectly handled processing of input strings resulting in memory corruption. An attacker could use this issue to cause FriBidi to crash, resulting in a denial of service,...

SUSE-SU-2022:1845-1 Security update for fribidi

This update for fribidi fixes the following issues: - CVE-2022-25308: Fixed stack out of bounds read bsc1196147. - CVE-2022-25309: Fixed heap-buffer-overflow in fribidicaprtltounicode bsc1196148. - CVE-2022-25310: Fixed NULL pointer dereference in fribidiremovebidimarks bsc1196150...

SUSE-SU-2022:1844-1 Security update for fribidi

This update for fribidi fixes the following issues: - CVE-2022-25308: Fixed stack out of bounds read bsc1196147. - CVE-2022-25309: Fixed heap-buffer-overflow in fribidicaprtltounicode bsc1196148. - CVE-2022-25310: Fixed NULL pointer dereference in fribidiremovebidimarks bsc1196150...

new packages: fribidi

An update is available for fribidi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Denial Of Service (DoS)

fribidi is vulnerable to denial of service. The vulnerability exists due to the improper restriction of operations within the bounds of a memory buffer, allowing an attacker to cause an application crash...

Command Injection

fribidi is vulnerable to command injection. The vulnerability exists in fribidi which allows an attacker to inject and execute arbitrary codes...

Heap-based Buffer Overflow

fribidi:edge is vulnerable to heap-based buffer overflow. The fribidicaprtltounicode function of the fribidi-char-sets-cap-rtl.c file allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service...

Fedora: Security Advisory for fribidi (FEDORA-2022-d294f36c15)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: fribidi-1.0.11-3.fc36

A library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way; while the text data itself is always written in logical order...

Ubuntu: Security Advisory (USN-5366-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5366-2: FriBidi vulnerabilities

USN-5366-1 fixed several vulnerabilities in FriBidi. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that FriBidi incorrectly handled processing of input strings resulting in memory corruption. An attacker could use this issue to...

USN-5366-2 fribidi vulnerabilities

USN-5366-1 fixed several vulnerabilities in FriBidi. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that FriBidi incorrectly handled processing of input strings resulting in memory corruption. An attacker could use this issue to...

The vulnerability of the fribidi_cap_rtl_to_unicode function in the GNU FriBidi library allows a perpetrator to execute arbitrary code.

The vulnerability of the fribidicaprtltounicode function in the GNU FriBidi library arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ubuntu 22.04 LTS : FriBidi vulnerabilities (USN-5366-2)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5366-2 advisory. USN-5366-1 fixed several vulnerabilities in FriBidi. This update provides the corresponding updates for Ubuntu 22.04 LTS. Tenable has extracted the...