Red Hat Security Advisory

RHSA-2024:2410

harfbuzz security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) harfbuzz-2.7.4-10.el9, harfbuzz-devel-2.7.4-10.el9, harfbuzz-icu-2.7.4-10.el9
Red Hat Enterprise Linux BaseOS (v. 9) harfbuzz-2.7.4-10.el9

Fixes 1 record

TI-2023-10653 CVE-2023-25193 · GHSA-v8ff-vmc3-wr4m

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2)…

MEDIUM 42

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01812 Published 2023-02-04 Partial fix CWE-770