Summary
It was discovered that HarfBuzz incorrectly handled shaping certain fonts.
A remote attacker could possibly use this issue to cause HarfBuzz to
consume resources, leading to a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | harfbuzz | 2.6.4-1ubuntu4.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | harfbuzz | 2.7.4-1ubuntu3.2 |
Vulnerabilities 1
-
High 7.5
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks duri…
References
-
report
https://ubuntu.com/security/CVE-2023-25193