Alpaquita Linux StreamSecurity Advisory

Search Cve

CVE-2023-25193

Published: September 8, 2023Last modified: September 8, 2023

Description

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.

Severity score breakdown

Parameter	Value
Base score	7.5
Attack Vector	NETWORK
Attack complexity	LOW
Privileges required	NONE
User interaction	NONE
Scope	UNCHANGED
Confidentiality	NONE
Integrity impact	NONE
Availability impact	HIGH
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Status

Product	Release	Package	Status
Alpaquita Linux	23 LTS	openjdk11	Not affected (11.0.20.1_p1-r0)
		openjdk11-container-jre	Not affected (11.0.20.1_p1-r0)
		openjdk11-jvmci	Not affected (11.0.20.1_p1-r0)
		openjdk11-lite	Not affected (11.0.20.1_p1-r0)
		openjdk17	Not affected (17.0.8.1_p1-r0)
		openjdk17-container-jre	Not affected (17.0.8.1_p1-r0)
		openjdk17-lite	Not affected (17.0.8.1_p1-r0)
	Stream	openjdk11	Not affected (11.0.20.1_p1-r1)
		openjdk11-container-jre	Not affected (11.0.20.1_p1-r0)
		openjdk11-jvmci	Not affected (11.0.20.1_p1-r1)
		openjdk11-lite	Not affected (11.0.20.1_p1-r1)
		openjdk17	Not affected (17.0.8.1_p1-r1)
		openjdk17-container-jre	Not affected (17.0.8.1_p1-r0)
		openjdk17-lite	Not affected (17.0.8.1_p1-r1)

References

How to Fix Liberica NIK Not Starting on macOS Catalina and Later

If you use macOS Catalina and later you may encounter the issue that prevents Liberica NIK from starting. To fix it, run the following:

sudo xattr -r -d com.apple.quarantine path/to/graalvm/folder/

If you need more help, check out the FAQ at the bottom of this page or contact us.