{"id":"CVE-2022-33068","aliases":["ALPINE-CVE-2022-33068","ALSA-2022:8384","BELL-CVE-2022-33068","DEBIAN-CVE-2022-33068","EUVD-2022-36125","GHSA-cq67-chj5-8385","OESA-2022-1777","RHSA-2022:6999","RHSA-2022:7000","RHSA-2022:7012","RHSA-2022:7013","RHSA-2022:8384","RLSA-2022:8384","ROOT-OS-DEBIAN-11-CVE-2022-33068","SUSE-SU-2022:2663-1","SUSE-SU-2022:2664-1","UBUNTU-CVE-2022-33068","USN-5524-1","openSUSE-SU-2022:2663-1","openSUSE-SU-2024:12168-1"],"status":"published","title":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers...","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01189,"percentile":0.68147,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2022-06-22T13:24:42Z","modified":"2026-11-03T07:18:33Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"harfbuzz","fixed_in":["4.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"harfbuzz","fixed_in":["4.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"harfbuzz","fixed_in":["4.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"harfbuzz","fixed_in":["4.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"harfbuzz","fixed_in":["4.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"harfbuzz","fixed_in":["4.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"harfbuzz","fixed_in":["4.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"harfbuzz","fixed_in":["4.4.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"harfbuzz","fixed_in":["2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"harfbuzz-devel","fixed_in":["2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"harfbuzz-icu","fixed_in":["2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"harfbuzz","fixed_in":["5.2.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"harfbuzz","fixed_in":["5.2.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"harfbuzz","fixed_in":["5.2.0-2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"harfbuzz","fixed_in":["2.8.1-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"harfbuzz","fixed_in":["2.8.1-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"harfbuzz","fixed_in":["2.8.2-3.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-debuginfo","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-debugsource","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-devel","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-devel-debuginfo","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-icu","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-icu-debuginfo","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz-debuginfo","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz-debugsource","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz-devel-debuginfo","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz-icu-debuginfo","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"harfbuzz","fixed_in":["0:2.7.4-8.el9"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"harfbuzz","fixed_in":["2.7.4-1.root.io.2","2.7.4-1.root.io.6","2.7.4-1.root.io.3","2.7.4-1.root.io.4","2.7.4-1.root.io.5","2.7.4-1.aikido.8","2.7.4-1.root.io.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-harfbuzz","fixed_in":["2.7.4-1.root.io.2","2.7.4-1.root.io.6","2.7.4-1.root.io.3","2.7.4-1.root.io.4","2.7.4-1.root.io.5","2.7.4-1.aikido.8","2.7.4-1.root.io.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"harfbuzz","fixed_in":["3.4.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"harfbuzz","fixed_in":["3.4.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"harfbuzz","fixed_in":["2.6.4-1ubuntu4.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"harfbuzz","fixed_in":["2.7.4-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"harfbuzz","fixed_in":["2.6.4-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"harfbuzz","fixed_in":["4.4.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"harfbuzz-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"harfbuzz-icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-3.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.5.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el8_6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.17.0.8-2.el9_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"harfbuzz-icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"harfbuzz-icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-8.el9"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-1.root.io.2"},{"fixed":"2.7.4-1.root.io.6"},{"fixed":"2.7.4-1.root.io.3"},{"fixed":"2.7.4-1.root.io.4"},{"fixed":"2.7.4-1.root.io.5"},{"fixed":"2.7.4-1.aikido.8"},{"fixed":"2.7.4-1.root.io.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-1.root.io.2"},{"fixed":"2.7.4-1.root.io.6"},{"fixed":"2.7.4-1.root.io.3"},{"fixed":"2.7.4-1.root.io.4"},{"fixed":"2.7.4-1.root.io.5"},{"fixed":"2.7.4-1.aikido.8"},{"fixed":"2.7.4-1.root.io.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-1ubuntu4.2"}]}],"versions":["2.6.1-3","2.6.2-1","2.6.4-1","2.6.4-1ubuntu1","2.6.4-1ubuntu2","2.6.4-1ubuntu3","2.6.4-1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-1ubuntu3.1"}]}],"versions":["2.7.4-1ubuntu1","2.7.4-1ubuntu2","2.7.4-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2+dfsg-5ubuntu1","6.2.2+dfsg-6ubuntu1","6.2.2+dfsg-6ubuntu2","6.2.4+dfsg-1ubuntu1","6.2.4+dfsg-2ubuntu1","6.2.4+dfsg-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2+dfsg-18","6.4.2+dfsg-19","6.4.2+dfsg-19build1","6.4.2+dfsg-20","6.4.2+dfsg-21","6.4.2+dfsg-21.1build4","6.4.2+dfsg-21.1build5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.3+dfsg-0ubuntu2","6.8.3+dfsg-0ubuntu3","6.9.2+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-7","6.10.2+dfsg-14ubuntu2","6.10.2+dfsg-15","6.10.2+dfsg-16","6.11.2+dfsg-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.9.2+dfsg-1ubuntu1","6.9.2+dfsg-2","6.9.2+dfsg-3ubuntu1","6.9.2+dfsg-3ubuntu2","6.9.2+dfsg-4","6.10.2+dfsg-3","6.10.2+dfsg-6","6.10.2+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-1ubuntu4.2"}]}],"versions":["2.6.1-3","2.6.2-1","2.6.4-1","2.6.4-1ubuntu1","2.6.4-1ubuntu2","2.6.4-1ubuntu3","2.6.4-1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-1ubuntu3.1"}]}],"versions":["2.7.4-1ubuntu1","2.7.4-1ubuntu2","2.7.4-1ubuntu3"]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"harfbuzz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"harfbuzz_project","product":"harfbuzz"}],"references":[{"url":"https://github.com/harfbuzz/harfbuzz/issues/3557","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FQBJ24W6TXLSAQWCFW7IBGUMX4AJI3S4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQMEXOVDL3T2UXKBCON7JSOCE646G7HG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56WTC5IY4EIUHVUIHMCXA3BSBZLSZCI/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202209-11","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33068","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FQBJ24W6TXLSAQWCFW7IBGUMX4AJI3S4/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QQMEXOVDL3T2UXKBCON7JSOCE646G7HG/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W56WTC5IY4EIUHVUIHMCXA3BSBZLSZCI/"},{"url":"https://github.com/advisories/GHSA-cq67-chj5-8385"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-33068","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8384","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-33068","tags":["report"]},{"url":"https://bugzilla.redhat.com/2102608","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8384.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-33068","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/33xxx/CVE-2022-33068.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-33068","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1777","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6999","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133817","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6999.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21618","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21619","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21619","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21624","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21624","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21626","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21626","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21626","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21628","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21628","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2102608","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-33068","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39399","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39399","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7000","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7000.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7012","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131863","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7012.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7013","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131865","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7013.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8384.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8384","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222663-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200900","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-33068","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222664-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-33068","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5524-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MJ2G563AHSBZG4OGZ6WVW7U5ARNA4K5R/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-33068","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-06-22T13:24:42Z","modified":"2024-08-03T08:01:19.054Z","updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-36125","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-06-22T13:24:42Z","modified":"2024-08-03T08:01:19Z","updated_at":"2026-11-03T03:25:31.011886Z"}],"ghsa":[{"id":"GHSA-cq67-chj5-8385","title":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers...","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-06-24T00:00:30Z","modified":"2023-02-02T05:05:12Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:52:03.084435Z"}],"nvd":[{"id":"CVE-2022-33068","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-06-23T17:15:14.35Z","modified":"2026-06-17T04:48:25.907Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:22.613788Z"}],"osv":[{"id":"ALPINE-CVE-2022-33068","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-06-23T17:15:14.35Z","modified":"2026-11-03T07:18:33.45335668Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"BELL-CVE-2022-33068","title":"CVE-2022-33068 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:40.369211Z","modified":"2026-01-26T09:49:27.334114Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"OESA-2022-1777","title":"harfbuzz security update","description":"HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.(CVE-2022-33068)","status":"published","published":"2022-07-22T11:05:03Z","modified":"2026-08-18T01:16:51.831329735Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:6999","title":"Red Hat Security Advisory: java-17-openjdk security and bug fix update","status":"published","published":"2024-09-16T09:22:04Z","modified":"2026-10-09T10:04:56Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7000","title":"Red Hat Security Advisory: java-17-openjdk security and bug fix update","status":"published","published":"2024-09-16T09:21:02Z","modified":"2026-10-09T10:04:56Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7012","title":"Red Hat Security Advisory: java-11-openjdk security and bug fix update","status":"published","published":"2024-09-16T09:21:42Z","modified":"2026-10-09T10:05:05Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7013","title":"Red Hat Security Advisory: java-11-openjdk security and bug fix update","status":"published","published":"2024-09-16T09:22:12Z","modified":"2026-10-09T10:05:06Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8384","title":"Red Hat Security Advisory: harfbuzz security update","status":"published","published":"2024-09-16T08:39:26Z","modified":"2026-06-30T10:02:59Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:8384","title":"Moderate: harfbuzz security update","description":"HarfBuzz is an implementation of the OpenType Layout engine.\n\nSecurity Fix(es):\n\n* harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:23:02Z","modified":"2026-02-05T08:15:13.17179Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-33068","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-06-23T17:15:00Z","modified":"2026-10-17T12:56:17.473006661Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2022:8384","title":"Moderate: harfbuzz security update","description":"HarfBuzz is an implementation of the OpenType Layout engine.\n\nSecurity Fix(es):\n\n* harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:30:43.923016939Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-33068","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-06-22T13:24:42Z","modified":"2026-10-28T10:31:25.120115913Z","updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DEBIAN-CVE-2022-33068","description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2022-06-23T17:15:14.35Z","modified":"2026-11-03T06:02:33.549700425Z","updated_at":"2026-11-03T06:44:05.456691Z"},{"id":"openSUSE-SU-2022:2663-1","title":"Security update for harfbuzz","description":"This update for harfbuzz fixes the following issues:\n\n- CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900).\n","status":"published","published":"2022-08-04T07:21:35Z","modified":"2025-05-07T18:14:09.324515Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12168-1","title":"harfbuzz-devel-4.4.1-1.1 on GA media","description":"These are all security issues fixed in the harfbuzz-devel-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:33.698587Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2022-33068","title":"CVE-2022-33068 in harfbuzz - Patched by Root","description":"Root has patched CVE-2022-33068 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-20T13:50:35Z","modified":"2026-08-20T15:00:09.664467567Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"SUSE-SU-2022:2663-1","title":"Security update for harfbuzz","description":"This update for harfbuzz fixes the following issues:\n\n- CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900).\n","status":"published","published":"2022-08-04T07:21:31Z","modified":"2026-02-04T02:21:06.074612Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2664-1","title":"Security update for harfbuzz","description":"This update for harfbuzz fixes the following issues:\n\n- CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900).\n","status":"published","published":"2022-08-04T07:22:14Z","modified":"2026-02-04T04:17:17.222228Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5524-1","title":"harfbuzz vulnerability","description":"It was discovered that HarfBuzz incorrectly handled certain glyph sizes. A\nremote attacker could use this issue to cause HarfBuzz to crash, resulting\nin a denial of service.\n","status":"published","published":"2022-07-19T11:58:35Z","modified":"2026-04-27T18:52:38.417899Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}