Debian Package Tracker
Register | Log in
Subscribe

harfbuzz

Choose email to subscribe with

general
  • source: harfbuzz (main)
  • version: 6.0.0+dfsg-3
  • maintainer: أحمد المحمودي (Ahmed El-Mahmoudy) (DMD)
  • uploaders: Emilio Pozuelo Monfort [DMD]
  • arch: all any
  • std-ver: 4.6.2
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 1.4.2-1
  • oldstable: 2.3.1-1
  • stable: 2.7.4-1
  • testing: 6.0.0+dfsg-3
  • unstable: 6.0.0+dfsg-3
versioned links
  • 1.4.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.3.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.7.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 6.0.0+dfsg-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • gir1.2-harfbuzz-0.0
  • libharfbuzz-bin
  • libharfbuzz-dev
  • libharfbuzz-doc
  • libharfbuzz-gobject0
  • libharfbuzz-icu0
  • libharfbuzz-subset0
  • libharfbuzz0-udeb
  • libharfbuzz0b (1 bugs: 0, 1, 0, 0)
action needed
A new upstream version is available: 7.1.0 high
A new upstream version 7.1.0 is available, you should consider packaging it.
Created: 2023-02-14 Last update: 2023-03-25 18:38
1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:
  • CVE-2023-25193: hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
Created: 2023-02-05 Last update: 2023-02-19 21:30
1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:
  • CVE-2023-25193: hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
Created: 2023-02-05 Last update: 2023-02-19 21:30
1 bug tagged patch in the BTS normal
The BTS contains patches fixing 1 bug, consider including or untagging them.
Created: 2022-07-27 Last update: 2023-03-25 21:01
Fails to build during reproducibility testing normal
A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!
Created: 2023-02-07 Last update: 2023-03-25 20:38
lintian reports 5 warnings normal
Lintian reports 5 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2023-02-05 Last update: 2023-02-05 13:07
debian/patches: 1 patch to forward upstream low

Among the 1 debian patch available in version 6.0.0+dfsg-3 of the package, we noticed the following issues:

  • 1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2023-02-26 Last update: 2023-02-27 20:59
2 low-priority security issues in bullseye low

There are 2 open security issues in bullseye.

2 issues left for the package maintainer to handle:
  • CVE-2022-33068: (needs triaging) An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
  • CVE-2023-25193: (needs triaging) hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-07-04 Last update: 2023-02-19 21:30
Build log checks report 1 warning low
Build log checks report 1 warning
Created: 2022-09-22 Last update: 2022-09-22 16:37
news
[rss feed]
  • [2023-02-07] harfbuzz 6.0.0+dfsg-3 MIGRATED to testing (Debian testing watch)
  • [2023-02-01] Accepted harfbuzz 6.0.0+dfsg-3 (source) into unstable (Jeremy Bicha)
  • [2023-02-01] Accepted harfbuzz 6.0.0+dfsg-2 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Jeremy Bicha)
  • [2023-01-30] Accepted harfbuzz 6.0.0+dfsg-1 (source) into unstable (Jeremy Bicha)
  • [2023-01-03] harfbuzz 6.0.0-1 MIGRATED to testing (Debian testing watch)
  • [2022-12-28] Accepted harfbuzz 6.0.0-1 (source) into unstable (Jeremy Bicha)
  • [2022-12-15] Accepted harfbuzz 5.3.1-2 (source) into unstable (Jeremy Bicha)
  • [2022-12-13] Accepted harfbuzz 5.3.1-1 (source) into unstable (Jeremy Bicha)
  • [2022-09-27] harfbuzz 5.2.0-2 MIGRATED to testing (Debian testing watch)
  • [2022-09-22] Accepted harfbuzz 5.2.0-2 (source) into unstable (Jeremy Bicha)
  • [2022-09-17] Accepted harfbuzz 5.2.0-1 (source) into experimental (Jeremy Bicha)
  • [2022-09-15] Accepted harfbuzz 5.1.0-1 (source) into experimental (Jeremy Bicha)
  • [2021-01-24] harfbuzz 2.7.4-1 MIGRATED to testing (Debian testing watch)
  • [2021-01-18] Accepted harfbuzz 2.7.4-1 (source) into unstable (Emilio Pozuelo Monfort)
  • [2020-08-16] harfbuzz 2.6.7-1 MIGRATED to testing (Debian testing watch)
  • [2020-06-13] Accepted harfbuzz 2.6.7-1 (source) into unstable (أحمد المحمودي (Ahmed El-Mahmoudy)) (signed by: أحمد المحمودي)
  • [2019-12-17] Accepted harfbuzz 0.9.35-2+deb8u1 (source amd64 all) into oldoldstable (Thorsten Alteholz)
  • [2019-11-08] harfbuzz 2.6.4-1 MIGRATED to testing (Debian testing watch)
  • [2019-11-03] Accepted harfbuzz 2.6.4-1 (source) into unstable (أحمد المحمودي (Ahmed El-Mahmoudy)) (signed by: أحمد المحمودي)
  • [2019-10-08] harfbuzz 2.6.2-1 MIGRATED to testing (Debian testing watch)
  • [2019-10-03] Accepted harfbuzz 2.6.2-1 (source) into unstable (أحمد المحمودي (Ahmed El-Mahmoudy)) (signed by: أحمد المحمودي)
  • [2019-09-16] harfbuzz 2.6.1-3 MIGRATED to testing (Debian testing watch)
  • [2019-09-11] Accepted harfbuzz 2.6.1-3 (source) into unstable (أحمد المحمودي (Ahmed El-Mahmoudy)) (signed by: أحمد المحمودي)
  • [2019-09-01] harfbuzz 2.6.1-2 MIGRATED to testing (Debian testing watch)
  • [2019-08-27] Accepted harfbuzz 2.6.1-2 (source) into unstable (أحمد المحمودي (Ahmed El-Mahmoudy)) (signed by: أحمد المحمودي)
  • [2019-08-26] Accepted harfbuzz 2.6.1-1 (source) into unstable (أحمد المحمودي (Ahmed El-Mahmoudy)) (signed by: أحمد المحمودي)
  • [2019-08-18] harfbuzz 2.6.0-1 MIGRATED to testing (Debian testing watch)
  • [2019-08-16] Accepted harfbuzz 2.6.0-1 (source) into unstable (أحمد المحمودي (Ahmed El-Mahmoudy)) (signed by: أحمد المحمودي)
  • [2019-08-03] harfbuzz 2.5.3-1 MIGRATED to testing (Debian testing watch)
  • [2019-07-19] Accepted harfbuzz 2.5.3-1 (source) into unstable (أحمد المحمودي (Ahmed El-Mahmoudy)) (signed by: أحمد المحمودي)
  • 1
  • 2
bugs [bug history graph]
  • all: 4
  • RC: 1
  • I&N: 2
  • M&W: 1
  • F&P: 0
  • patch: 1
links
  • homepage
  • lintian (0, 5)
  • buildd: logs, checks, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 6.0.0+dfsg-3build1
  • 3 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing