[CLSA-2026:1789573030] Fix CVE(s): CVE-2023-25193
Type:
security
Severity:
Important
Release date:
2026-09-16 15:37:20 UTC
Description:
* SECURITY UPDATE: Denial of service via quadratic mark attachment in GPOS - debian/patches/CVE-2023-25193.patch: memoize the last base glyph in MarkBasePos/MarkLigPos so backward search no longer rescans the buffer - CVE-2023-25193
CVEs fixed:
Updated packages:
  • gir1.2-harfbuzz-0.0_2.7.4-1+tuxcare.els1_amd64.deb
    sha:7b93c1d41b93b38664ef06add94dc7e64302bcf0
  • libharfbuzz-bin_2.7.4-1+tuxcare.els1_amd64.deb
    sha:2ebf26388457da3e6c9f93798c896c28230db71a
  • libharfbuzz-dev_2.7.4-1+tuxcare.els1_amd64.deb
    sha:8b2f2b57f9e2a0ea7f4afa2b839437bb6fafaff8
  • libharfbuzz-doc_2.7.4-1+tuxcare.els1_all.deb
    sha:e9ff5dc609f2b6adab0db4c49fe1749a85a66269
  • libharfbuzz-gobject0_2.7.4-1+tuxcare.els1_amd64.deb
    sha:f63eb5c772269c65c3a0307ea78074eac55afa84
  • libharfbuzz-icu0_2.7.4-1+tuxcare.els1_amd64.deb
    sha:8e182e2a07a3f790206486e2fc709dff3906708a
  • libharfbuzz0b_2.7.4-1+tuxcare.els1_amd64.deb
    sha:57964e56e8cad6c68f0973898c9ed00c771b6451
  • gir1.2-harfbuzz-0.0_2.7.4-1+tuxcare.els1_arm64.deb
    sha:bccc13c69e1f6e18a5281f0769ef8b358ba0b31a
  • libharfbuzz-bin_2.7.4-1+tuxcare.els1_arm64.deb
    sha:e551e4bd03c3e5682117ee117a3f01fab0022baa
  • libharfbuzz-dev_2.7.4-1+tuxcare.els1_arm64.deb
    sha:5b87267fda83d26746e8853b311ec889458ae3ea
  • libharfbuzz-gobject0_2.7.4-1+tuxcare.els1_arm64.deb
    sha:a92b07b8622844c1c89318215ed20a02ffdd2423
  • libharfbuzz-icu0_2.7.4-1+tuxcare.els1_arm64.deb
    sha:5c5dfe146eb61d8d3d1f46ae81fd22886d6caecc
  • libharfbuzz0b_2.7.4-1+tuxcare.els1_arm64.deb
    sha:a94b9622eafe81ae2c803bef4cb0d96e5120ef4c
  • gir1.2-harfbuzz-0.0_2.7.4-1+tuxcare.els1_armel.deb
    sha:a9302d281c69754ba7d37a01618aaba63c68cd25
  • libharfbuzz-bin_2.7.4-1+tuxcare.els1_armel.deb
    sha:85385e077e364fd17a73e3b83e634a3f85fa66a5
  • libharfbuzz-dev_2.7.4-1+tuxcare.els1_armel.deb
    sha:a585103c84b12bc2a7e1817ef802687f93ce7483
  • libharfbuzz-gobject0_2.7.4-1+tuxcare.els1_armel.deb
    sha:5ad57a174ba7882e7e6864d9ea78f8ddf1b564e0
  • libharfbuzz-icu0_2.7.4-1+tuxcare.els1_armel.deb
    sha:087838e007cdf0c2557517f1e6823738e1ee6aa5
  • libharfbuzz0b_2.7.4-1+tuxcare.els1_armel.deb
    sha:820f6f60cbd210b17c4f79b6b7366da80f8d8a07
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.