Security update for harfbuzz SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2664-1 Final 1 1 2022-08-04T07:22:14Z current 2022-08-04T07:22:14Z 2022-08-04T07:22:14Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for harfbuzz This update for harfbuzz fixes the following issues: - CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/openjdk-devel:11-2022-2664,Container bci/openjdk:11-2022-2664,Image SLES15-SP4-Hardened-BYOS-2022-2664,Image SLES15-SP4-Hardened-BYOS-Azure-2022-2664,Image SLES15-SP4-Hardened-BYOS-EC2-2022-2664,Image SLES15-SP4-Hardened-BYOS-GCE-2022-2664,Image SLES15-SP4-Manager-Server-4-3-BYOS-2022-2664,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2022-2664,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2022-2664,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2022-2664,Image SLES15-SP4-SAP-Azure-LI-BYOS-2022-2664,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2022-2664,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2022-2664,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2022-2664,Image SLES15-SP4-SAP-BYOS-2022-2664,Image SLES15-SP4-SAP-BYOS-Azure-2022-2664,Image SLES15-SP4-SAP-BYOS-EC2-2022-2664,Image SLES15-SP4-SAP-BYOS-GCE-2022-2664,Image SLES15-SP4-SAP-Hardened-2022-2664,Image SLES15-SP4-SAP-Hardened-Azure-2022-2664,Image SLES15-SP4-SAP-Hardened-BYOS-2022-2664,Image SLES15-SP4-SAP-Hardened-BYOS-Azure-2022-2664,Image SLES15-SP4-SAP-Hardened-BYOS-EC2-2022-2664,Image SLES15-SP4-SAP-Hardened-BYOS-GCE-2022-2664,Image SLES15-SP4-SAP-Hardened-EC2-2022-2664,Image SLES15-SP4-SAP-Hardened-GCE-2022-2664,Image SLES15-SP5-Hardened-BYOS-Azure-2022-2664,Image SLES15-SP5-Hardened-BYOS-EC2-2022-2664,Image SLES15-SP5-Hardened-BYOS-GCE-2022-2664,Image SLES15-SP5-SAP-Azure-LI-BYOS-2022-2664,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2022-2664,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2022-2664,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2022-2664,Image SLES15-SP5-SAP-BYOS-Azure-2022-2664,Image SLES15-SP5-SAP-BYOS-EC2-2022-2664,Image SLES15-SP5-SAP-BYOS-GCE-2022-2664,Image SLES15-SP5-SAP-Hardened-Azure-2022-2664,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2022-2664,Image SLES15-SP5-SAP-Hardened-BYOS-EC2-2022-2664,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2022-2664,Image SLES15-SP5-SAP-Hardened-EC2-2022-2664,Image SLES15-SP5-SAP-Hardened-GCE-2022-2664,SUSE-2022-2664,SUSE-SLE-Module-Basesystem-15-SP4-2022-2664,openSUSE-SLE-15.4-2022-2664 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222664-1/ Link for SUSE-SU-2022:2664-1 https://lists.suse.com/pipermail/sle-security-updates/2022-August/011798.html E-Mail link for SUSE-SU-2022:2664-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1200900 SUSE Bug 1200900 https://www.suse.com/security/cve/CVE-2022-33068/ SUSE CVE CVE-2022-33068 page Container bci/openjdk-devel:11 Container bci/openjdk:11 Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-EC2 Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-EC2 Image SLES15-SP5-SAP-Hardened-GCE SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.4 libharfbuzz0-3.4.0-150400.3.3.1 harfbuzz-devel-3.4.0-150400.3.3.1 harfbuzz-tools-3.4.0-150400.3.3.1 libharfbuzz-gobject0-3.4.0-150400.3.3.1 libharfbuzz-gobject0-32bit-3.4.0-150400.3.3.1 libharfbuzz-gobject0-64bit-3.4.0-150400.3.3.1 libharfbuzz-icu0-3.4.0-150400.3.3.1 libharfbuzz-icu0-32bit-3.4.0-150400.3.3.1 libharfbuzz-icu0-64bit-3.4.0-150400.3.3.1 libharfbuzz-subset0-3.4.0-150400.3.3.1 libharfbuzz-subset0-32bit-3.4.0-150400.3.3.1 libharfbuzz-subset0-64bit-3.4.0-150400.3.3.1 libharfbuzz0-32bit-3.4.0-150400.3.3.1 libharfbuzz0-64bit-3.4.0-150400.3.3.1 typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.3.1 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Container bci/openjdk-devel:11 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Container bci/openjdk:11 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-Hardened-BYOS libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-Hardened-BYOS-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-Hardened-BYOS-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-Hardened-BYOS-GCE libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-BYOS libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-BYOS-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-GCE libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-GCE libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-EC2 libharfbuzz0-3.4.0-150400.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE harfbuzz-devel-3.4.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libharfbuzz-gobject0-3.4.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libharfbuzz-icu0-3.4.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libharfbuzz-subset0-3.4.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libharfbuzz0-3.4.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libharfbuzz0-32bit-3.4.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 harfbuzz-devel-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 harfbuzz-tools-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libharfbuzz-gobject0-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libharfbuzz-gobject0-32bit-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libharfbuzz-icu0-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libharfbuzz-icu0-32bit-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libharfbuzz-subset0-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libharfbuzz-subset0-32bit-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libharfbuzz0-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libharfbuzz0-32bit-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.3.1 as a component of openSUSE Leap 15.4 An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. CVE-2022-33068 Container bci/openjdk-devel:11:libharfbuzz0-3.4.0-150400.3.3.1 Container bci/openjdk:11:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-Hardened-BYOS-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-Hardened-BYOS-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-Hardened-BYOS-GCE:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-Hardened-BYOS:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-BYOS-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-BYOS-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-BYOS-GCE:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-BYOS:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-BYOS:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-GCE:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-Hardened-BYOS-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-Hardened-BYOS-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-BYOS-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-BYOS-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Hardened-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Hardened-EC2:libharfbuzz0-3.4.0-150400.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:libharfbuzz0-3.4.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:harfbuzz-devel-3.4.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libharfbuzz-gobject0-3.4.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libharfbuzz-icu0-3.4.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libharfbuzz-subset0-3.4.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libharfbuzz0-3.4.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libharfbuzz0-32bit-3.4.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.3.1 openSUSE Leap 15.4:harfbuzz-devel-3.4.0-150400.3.3.1 openSUSE Leap 15.4:harfbuzz-tools-3.4.0-150400.3.3.1 openSUSE Leap 15.4:libharfbuzz-gobject0-3.4.0-150400.3.3.1 openSUSE Leap 15.4:libharfbuzz-gobject0-32bit-3.4.0-150400.3.3.1 openSUSE Leap 15.4:libharfbuzz-icu0-3.4.0-150400.3.3.1 openSUSE Leap 15.4:libharfbuzz-icu0-32bit-3.4.0-150400.3.3.1 openSUSE Leap 15.4:libharfbuzz-subset0-3.4.0-150400.3.3.1 openSUSE Leap 15.4:libharfbuzz-subset0-32bit-3.4.0-150400.3.3.1 openSUSE Leap 15.4:libharfbuzz0-3.4.0-150400.3.3.1 openSUSE Leap 15.4:libharfbuzz0-32bit-3.4.0-150400.3.3.1 openSUSE Leap 15.4:typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222664-1/ https://www.suse.com/security/cve/CVE-2022-33068.html CVE-2022-33068 https://bugzilla.suse.com/1200900 SUSE Bug 1200900