[ubuntu/focal-updates] harfbuzz 2.6.4-1ubuntu4.2 (Accepted)

[Ubuntu Archive Robot]

harfbuzz (2.6.4-1ubuntu4.2) focal-security; urgency=medium

  * SECURITY UPDATE: DoS via integer overflow
    - debian/patches/CVE-2022-33068-1.patch: limit glyph extents in
      src/hb-ot-color-sbix-table.hh.
    - debian/patches/CVE-2022-33068-2.patch: fix conditional in
      src/hb-ot-color-sbix-table.hh.
    - CVE-2022-33068
  * debian/rules: increase fuzzer timeouts to fix FTBFS on riscv64.

Date: 2022-07-18 11:34:08.291046+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/harfbuzz/2.6.4-1ubuntu4.2
-------------- next part --------------
Sorry, changesfile not available.