harfbuzz 2.7.4-1ubuntu3.1 source package in Ubuntu

Changelog

harfbuzz (2.7.4-1ubuntu3.1) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via integer overflow
    - debian/patches/CVE-2022-33068-1.patch: limit glyph extents in
      src/hb-ot-color-sbix-table.hh.
    - debian/patches/CVE-2022-33068-2.patch: fix conditional in
      src/hb-ot-color-sbix-table.hh.
    - CVE-2022-33068

 -- Marc Deslauriers <email address hidden>  Wed, 13 Jul 2022 12:40:13 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates main misc
Jammy security main misc

Downloads

File Size SHA-256 Checksum
harfbuzz_2.7.4.orig.tar.xz 9.1 MiB 6ad11d653347bd25d8317589df4e431a2de372c0cf9be3543368e07ec23bb8e7
harfbuzz_2.7.4-1ubuntu3.1.debian.tar.xz 11.5 KiB 55f351bcd598af288bf02ddd9b54926d1528594f45a2776f0e512a044d71e33f
harfbuzz_2.7.4-1ubuntu3.1.dsc 2.8 KiB 373c556030ed2178ad1ffb7b8c4c972b5abeb40868749ac5368089cacc2464a1

View changes file

Binary packages built by this source

gir1.2-harfbuzz-0.0: OpenType text shaping engine (GObject introspection data)

 HarfBuzz is an implementation of the OpenType Layout engine (aka layout
 engine) and the script-specific logic (aka shaping engine).
 .
 This package contains introspection data for the GObject bindings library.

libharfbuzz-bin: OpenType text shaping engine (utility)

 HarfBuzz is an implementation of the OpenType Layout engine (aka layout
 engine) and the script-specific logic (aka shaping engine).
 .
 This package contains a command line interface for the HarfBuzz library.

libharfbuzz-bin-dbgsym: debug symbols for libharfbuzz-bin
libharfbuzz-dev: Development files for OpenType text shaping engine

 HarfBuzz is an implementation of the OpenType Layout engine (aka layout
 engine) and the script-specific logic (aka shaping engine).
 .
 This package contains the header files and static libraries for the
 HarfBuzz library.

libharfbuzz-doc: Documentation files for the HarfBuzz library

 HarfBuzz is an implementation of the OpenType Layout engine (aka layout
 engine) and the script-specific logic (aka shaping engine).
 .
 This package contains the HTML documentation for the HarfBuzz library.

libharfbuzz-gobject0: OpenType text shaping engine ICU backend (GObject library)

 HarfBuzz is an implementation of the OpenType Layout engine (aka layout
 engine) and the script-specific logic (aka shaping engine).
 .
 This package contains the GObject library, providing wrapper GObject type
 bindings for all HarfBuzz objects and enums.

libharfbuzz-gobject0-dbgsym: debug symbols for libharfbuzz-gobject0
libharfbuzz-icu0: OpenType text shaping engine ICU backend

 HarfBuzz is an implementation of the OpenType Layout engine (aka layout
 engine) and the script-specific logic (aka shaping engine).
 .
 This package contains the ICU backend.

libharfbuzz-icu0-dbgsym: debug symbols for libharfbuzz-icu0
libharfbuzz0b: OpenType text shaping engine (shared library)

 HarfBuzz is an implementation of the OpenType Layout engine (aka layout
 engine) and the script-specific logic (aka shaping engine).
 .
 This package contains the shared libraries.

libharfbuzz0b-dbgsym: debug symbols for libharfbuzz0b