Alerts This Week
Warning Icon 1 1,003
Alerts This Week
Warning Icon 1 1,003

Ubuntu 16.04 ESM USN-5746-1 Severe: HarfBuzz Denial Of Service

ubuntu
Calendar Grey November 28, 2022
Dist Ubuntu Esm H88
Fix HarfBuzz security flaw in Ubuntu 16.04 ESM to avert Denial of Service threats from specially designed inputs.
HarfBuzz could be made to crash if it received specially crafted input.

Summary

HarfBuzz could be made to crash if it received specially crafted

input.

Software Description:

- harfbuzz: OpenType text shaping engine

Details:

Behzad Najjarpour Jabbari discovered that HarfBuzz incorrectly handled

certain inputs. A remote attacker could possibly use this issue to cause

a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service software update ubuntu input handling harfbuzz

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   libharfbuzz-bin                 1.0.1-1ubuntu0.1+esm1
   libharfbuzz0b                   1.0.1-1ubuntu0.1+esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5746-1

CVE-2015-9274

Severity
critical
Lowest
Low
Medium
High
Critical

November 28, 2022

Topics%20covered

Topics Covered

security advisory denial of service software update ubuntu input handling harfbuzz

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here