[CLSA-2026:1791492849] Fix CVE(s): CVE-2023-25193
Type:
security
Severity:
Important
Release date:
2026-10-08 20:54:19 UTC
Description:
* SECURITY UPDATE: DoS via O(n^2) mark attachment in GPOS - debian/patches/CVE-2023-25193.patch: cache the last base in MarkBasePos/MarkLigPos, speed up unsafe_to_break() - CVE-2023-25193
CVEs fixed:
Updated packages:
  • gir1.2-harfbuzz-0.0_1.7.2-1ubuntu1+tuxcare.els1_amd64.deb
    sha:19054b45996ba3c97d42204470e6e3dadf4b094d
  • libharfbuzz-bin_1.7.2-1ubuntu1+tuxcare.els1_amd64.deb
    sha:af879c5a044389f393939ae96e217fb8b1657053
  • libharfbuzz-dev_1.7.2-1ubuntu1+tuxcare.els1_amd64.deb
    sha:171478305a9506f56a2a896f25a081d85a935a59
  • libharfbuzz-doc_1.7.2-1ubuntu1+tuxcare.els1_all.deb
    sha:444aa95fb513673621eb299854bda5051411ba05
  • libharfbuzz-gobject0_1.7.2-1ubuntu1+tuxcare.els1_amd64.deb
    sha:7e2b473d0bc58bf183360f01c1afa4014d95582a
  • libharfbuzz-icu0_1.7.2-1ubuntu1+tuxcare.els1_amd64.deb
    sha:1a878cfb2d1add4c0f1779267b4db3588a2d1541
  • libharfbuzz0b_1.7.2-1ubuntu1+tuxcare.els1_amd64.deb
    sha:644885ef9f484dff7adb4a0b93cd24b289d488d4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.