Opened 8 months ago

Closed 8 months ago

Last modified 8 months ago

#22668 closed enhancement (fixed)

harfbuzz-12.3.1

Reported by: Bruce Dubbs Owned by: Joe Locash
Priority: normal Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (4)

comment:1 by Joe Locash, 8 months ago

Owner: changed from blfs-book to Joe Locash
Status: new → assigned

comment:2 by Joe Locash, 8 months ago

Resolution: → fixed
Status: assigned → closed 
Overview of changes leading to 12.3.1
Tuesday, January 20, 2026
=====================================
- Various speed optimizations.
- Build fixes for GCC 4.9.
- Fix NULL pointer deference when malloc fails.

Fixed at 67d08fe757.

comment:3 by zeckma, 8 months ago

There was an email thread on oss-security that mentioned the NULL pointer dereference issue. It doesn't seem to have a CVE assigned to it mostly because in the real world, it's pretty hard to exploit and can't be caused via input. I will be looking diligently to see if any security information comes out but I don't think there will be in this case.

comment:4 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.