UbuntuUpdates.org

Package "gir1.2-harfbuzz-0.0"

Name: gir1.2-harfbuzz-0.0

Description:

OpenType text shaping engine (GObject introspection data)

Latest version: 0.9.27-1ubuntu1.1
Release: trusty (14.04)
Level: updates
Repository: main
Head package: harfbuzz
Homepage: http://www.freedesktop.org/wiki/Software/HarfBuzz

Links


Download "gir1.2-harfbuzz-0.0"


Other versions of "gir1.2-harfbuzz-0.0" in Trusty

Repository Area Version
base main 0.9.27-1
security main 0.9.27-1ubuntu1.1
PPA: LibreOffice 1.0.1-1ubuntu0.1~14.04.2

Changelog

Version: 0.9.27-1ubuntu1.1 2016-08-24 16:06:49 UTC

  harfbuzz (0.9.27-1ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: memory access issue in hb-ot-layout-gpos-table.hh
    - debian/patches/CVE-2015-8947.patch: call check_struct earlier in
      src/hb-ot-layout-gpos-table.hh.
    - CVE-2015-8947

 -- Marc Deslauriers <email address hidden> Wed, 17 Aug 2016 11:20:31 -0400

Source diff to previous version
CVE-2015-8947 hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecif

Version: 0.9.27-1ubuntu1 2014-09-09 18:06:29 UTC

  harfbuzz (0.9.27-1ubuntu1) trusty; urgency=medium

  * debian/patches/0001-graphite2-Fix-cluster-mapping.patch: Cherry-pick a
    patch from upstream (in 0.9.30) to fix a crasher in the graphite2 engine
    when rendering some scripts (e.g. happens on Myanmar text). (LP: #1303516)
 -- Iain Lane <email address hidden> Mon, 21 Jul 2014 11:52:19 +0100

1303516 ubiquity crashed with SIGSEGV in _int_malloc()



About   -   Send Feedback to @ubuntu_updates