Описание
Security update for harfbuzz
This update for harfbuzz fixes the following issues:
- CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).
Список пакетов
Image SLES15-SP2-SAP-Azure
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-BYOS-Azure
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-BYOS-GCE
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-EC2-HVM
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-GCE
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-BYOS-Azure
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-BYOS-GCE
libharfbuzz0-2.6.4-150200.3.6.1
SUSE Enterprise Storage 7
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Enterprise Storage 7.1
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Micro 5.2
libharfbuzz0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Real Time 15 SP3
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Server 15 SP2-LTSS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Server 15 SP3-LTSS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Manager Proxy 4.2
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Manager Server 4.2
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
Ссылки
- Link for SUSE-SU-2023:1822-1
- E-Mail link for SUSE-SU-2023:1822-1
- SUSE Security Ratings
- SUSE Bug 1207922
- SUSE CVE CVE-2023-25193 page
Описание
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-Azure:libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-BYOS-Azure:libharfbuzz0-2.6.4-150200.3.6.1
Ссылки
- CVE-2023-25193
- SUSE Bug 1207922
- SUSE Bug 1213939