CVE-2022-25310

medium
Published 2022-11-15 · Modified 2022-11-18
CVSS v3
CVSS v2
VIR risk
5.5

Description

Moderate: fribidi security update

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-8011.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7514.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2047923

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2047896

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2047890

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7514

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:8011

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2022-25310

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7514

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2022-25310.html

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:8011

OS impact

OSVersionStatusFixed in
redhat rhel9fixed
suse slesaffected
rockylinux rocky8fixed
debian debianbookwormfixed1.0.8-2.1
debian debianbullseyefixed1.0.8-2+deb11u1
debian debianforkyfixed1.0.8-2.1
debian debiansidfixed1.0.8-2.1
debian debiantrixiefixed1.0.8-2.1
rockylinux rocky9fixed

References

Verify integrity in audit chain (admin only). AS-IS.