Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:1820-1

Опубликовано: 12 апр. 2023
Источник: suse-cvrf

Описание

Security update for harfbuzz

This update for harfbuzz fixes the following issues:

  • CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
libharfbuzz0-1.7.5-150000.3.3.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
libharfbuzz0-1.7.5-150000.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
harfbuzz-devel-1.7.5-150000.3.3.1
libharfbuzz-icu0-1.7.5-150000.3.3.1
libharfbuzz0-1.7.5-150000.3.3.1
libharfbuzz0-32bit-1.7.5-150000.3.3.1
SUSE Linux Enterprise Server 15 SP1-LTSS
harfbuzz-devel-1.7.5-150000.3.3.1
libharfbuzz-icu0-1.7.5-150000.3.3.1
libharfbuzz0-1.7.5-150000.3.3.1
libharfbuzz0-32bit-1.7.5-150000.3.3.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
harfbuzz-devel-1.7.5-150000.3.3.1
libharfbuzz-icu0-1.7.5-150000.3.3.1
libharfbuzz0-1.7.5-150000.3.3.1
libharfbuzz0-32bit-1.7.5-150000.3.3.1

Ссылки

Описание

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.

Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libharfbuzz0-1.7.5-150000.3.3.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libharfbuzz0-1.7.5-150000.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:harfbuzz-devel-1.7.5-150000.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libharfbuzz-icu0-1.7.5-150000.3.3.1
Ссылки