harfbuzz-2.7.4-8.el9

エラータID: AXSA:2023-4601:01

Release date: 
Thursday, January 5, 2023 - 09:10
Subject: 
harfbuzz-2.7.4-8.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

* harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-33068
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Solution: 

Update packages.

CVEs: 
CVE-2022-33068
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
Additional Info: 

N/A

Download: 

SRPMS
  1. harfbuzz-2.7.4-8.el9.src.rpm
    MD5: c10a8a0c62c7f42798c34b1a0c98493c
    SHA-256: ea3f4d3950a2b9a289e832236cd7567105bede17e73825186514a4895860c554
    Size: 9.11 MB

Asianux Server 9 for x86_64
  1. harfbuzz-2.7.4-8.el9.x86_64.rpm
    MD5: 3e47a1f391528b21eb78e3a933bf091a
    SHA-256: 3bb68819e9b11dbb92b7a585fba9d1a95bdd5b4f4c7ac46dc032816cb373467a
    Size: 625.18 kB
  2. harfbuzz-devel-2.7.4-8.el9.x86_64.rpm
    MD5: adaf20bf8af8569305b05cf964dba277
    SHA-256: 93451410609267fa81b1048230d95f43d58f879ba16fbf200cec8696dca5ea2e
    Size: 305.05 kB
  3. harfbuzz-icu-2.7.4-8.el9.x86_64.rpm
    MD5: 09e72b642e982b67bebc687b651338c5
    SHA-256: 5ccf3a9981e4f6c598d3153dac10db689dfb8ce0dd1745e74d001ebb1c741e88
    Size: 13.68 kB
  4. harfbuzz-2.7.4-8.el9.i686.rpm
    MD5: d952db115389818471889b882fef9aea
    SHA-256: b34e22b94f462dc6861a08f6ebbaa6999092bf616ef54137847d99c27760550f
    Size: 646.31 kB
  5. harfbuzz-devel-2.7.4-8.el9.i686.rpm
    MD5: c8a3dd12e7c3c21ee7fcbd0ae35f4d31
    SHA-256: 7696e5d1c01a4f9bb4e26cd717b251534c2c9fcfe5d3014e9c84d101d95634e1
    Size: 307.96 kB
  6. harfbuzz-icu-2.7.4-8.el9.i686.rpm
    MD5: d8726c0d6ac02fb59996f73208029624
    SHA-256: 6d1ff01ba5f7b4f6b307db372dafbedb306a44049ac592ead7a233b49d3a6374
    Size: 13.89 kB