Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:1822-1

Опубликовано: 12 апр. 2023
Источник: suse-cvrf

Описание

Security update for harfbuzz

This update for harfbuzz fixes the following issues:

  • CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).

Список пакетов

Image SLES15-SP2-SAP-Azure
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-BYOS-Azure
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-BYOS-GCE
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-EC2-HVM
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-GCE
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-BYOS-Azure
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP3-SAP-BYOS-GCE
libharfbuzz0-2.6.4-150200.3.6.1
SUSE Enterprise Storage 7
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Enterprise Storage 7.1
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Micro 5.2
libharfbuzz0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Real Time 15 SP3
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Server 15 SP2-LTSS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Server 15 SP3-LTSS
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Manager Proxy 4.2
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1
SUSE Manager Server 4.2
harfbuzz-devel-2.6.4-150200.3.6.1
libharfbuzz-gobject0-2.6.4-150200.3.6.1
libharfbuzz-icu0-2.6.4-150200.3.6.1
libharfbuzz-subset0-2.6.4-150200.3.6.1
libharfbuzz0-2.6.4-150200.3.6.1
libharfbuzz0-32bit-2.6.4-150200.3.6.1
typelib-1_0-HarfBuzz-0_0-2.6.4-150200.3.6.1

Описание

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.


Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-Azure:libharfbuzz0-2.6.4-150200.3.6.1
Image SLES15-SP2-SAP-BYOS-Azure:libharfbuzz0-2.6.4-150200.3.6.1

Ссылки