[ubuntu/focal-security] harfbuzz 2.6.4-1ubuntu4.2 (Accepted)

Tue Jul 19 11:53:49 UTC 2022

harfbuzz (2.6.4-1ubuntu4.2) focal-security; urgency=medium

  * SECURITY UPDATE: DoS via integer overflow
    - debian/patches/CVE-2022-33068-1.patch: limit glyph extents in
      src/hb-ot-color-sbix-table.hh.
    - debian/patches/CVE-2022-33068-2.patch: fix conditional in
      src/hb-ot-color-sbix-table.hh.
    - CVE-2022-33068
  * debian/rules: increase fuzzer timeouts to fix FTBFS on riscv64.

Date: 2022-07-18 11:34:08.291046+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/harfbuzz/2.6.4-1ubuntu4.2
-------------- next part --------------
Sorry, changesfile not available.