Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:1852-1

Опубликовано: 14 апр. 2023
Источник: suse-cvrf

Описание

Security update for harfbuzz

This update for harfbuzz fixes the following issues:

  • CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).

Список пакетов

Container bci/openjdk-devel:11
libharfbuzz0-3.4.0-150400.3.6.1
Container bci/openjdk:11
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Hardened-BYOS
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Hardened-BYOS-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Hardened-BYOS-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Hardened-BYOS-GCE
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3-EC2-llc
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3-EC2-ltd
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-BYOS
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-BYOS-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-BYOS-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-BYOS-GCE
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Hardened
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Hardened-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Hardened-BYOS
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Hardened-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-SAP-Hardened-GCE
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-Hardened-BYOS-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-Hardened-BYOS-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-Hardened-BYOS-GCE
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Azure-3P
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-BYOS-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-BYOS-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-BYOS-GCE
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Hardened-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Hardened-EC2
libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP5-SAP-Hardened-GCE
libharfbuzz0-3.4.0-150400.3.6.1
SUSE Linux Enterprise Micro 5.3
libharfbuzz-gobject0-3.4.0-150400.3.6.1
libharfbuzz0-3.4.0-150400.3.6.1
typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1
SUSE Linux Enterprise Micro 5.4
libharfbuzz-gobject0-3.4.0-150400.3.6.1
libharfbuzz0-3.4.0-150400.3.6.1
typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
harfbuzz-devel-3.4.0-150400.3.6.1
libharfbuzz-gobject0-3.4.0-150400.3.6.1
libharfbuzz-icu0-3.4.0-150400.3.6.1
libharfbuzz-subset0-3.4.0-150400.3.6.1
libharfbuzz0-3.4.0-150400.3.6.1
libharfbuzz0-32bit-3.4.0-150400.3.6.1
typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1
openSUSE Leap 15.4
harfbuzz-devel-3.4.0-150400.3.6.1
harfbuzz-tools-3.4.0-150400.3.6.1
libharfbuzz-gobject0-3.4.0-150400.3.6.1
libharfbuzz-gobject0-32bit-3.4.0-150400.3.6.1
libharfbuzz-icu0-3.4.0-150400.3.6.1
libharfbuzz-icu0-32bit-3.4.0-150400.3.6.1
libharfbuzz-subset0-3.4.0-150400.3.6.1
libharfbuzz-subset0-32bit-3.4.0-150400.3.6.1
libharfbuzz0-3.4.0-150400.3.6.1
libharfbuzz0-32bit-3.4.0-150400.3.6.1
typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1
openSUSE Leap Micro 5.3
libharfbuzz-gobject0-3.4.0-150400.3.6.1
libharfbuzz0-3.4.0-150400.3.6.1
typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1

Описание

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.


Затронутые продукты
Container bci/openjdk-devel:11:libharfbuzz0-3.4.0-150400.3.6.1
Container bci/openjdk:11:libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Hardened-BYOS-Azure:libharfbuzz0-3.4.0-150400.3.6.1
Image SLES15-SP4-Hardened-BYOS-EC2:libharfbuzz0-3.4.0-150400.3.6.1

Ссылки