[Bug 2036820] New: CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set - i18n-bugs - Fedora Mailing-Lists

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

[Bug 2036820] New: CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

[Bug 1761885] Drop unused .uuid...

[Bug 2259870] New: [abrt] ibus:...

bugzilla＠redhat.com

Tuesday, 4 January 2022 Tue, 4 Jan '22

12:03 a.m.

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Bug ID: 2036820 Summary: CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mrehak(a)redhat.com CC: bdettelb(a)redhat.com, caolanm(a)redhat.com, caswilli(a)redhat.com, eng-i18n-bugs(a)redhat.com, erack(a)redhat.com, erik-fedora(a)vanpienbroek.nl, i18n-bugs(a)lists.fedoraproject.org, jburrell(a)redhat.com, jhorak(a)redhat.com, jwong(a)redhat.com, kaycoth(a)redhat.com, klember(a)redhat.com, manisandro(a)gmail.com, moceap(a)hotmail.com, nobody(a)redhat.com, pnemade(a)redhat.com, psatpute(a)redhat.com, rh-spice-bugs(a)redhat.com, stransky(a)redhat.com, tpopela(a)redhat.com, tuxator(a)o2.pl Target Milestone: --- Classification: Other An out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy). External Reference: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

Show replies by date

bugzilla＠redhat.com

Tuesday, 4 January Tue, 4 Jan

12:03 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Marian Rehak <mrehak(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2036821, 2036822 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2036821 [Bug 2036821] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036822 [Bug 2036822] CVE-2021-45931 mingw-harfbuzz: harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set [fedora-all] -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

12:03 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 --- Comment #1 from Marian Rehak <mrehak(a)redhat.com> --- Created harfbuzz tracking bugs for this issue: Affects: fedora-all [bug 2036821] Created mingw-harfbuzz tracking bugs for this issue: Affects: fedora-all [bug 2036822] -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

12:04 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Marian Rehak <mrehak(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2036823 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

2:39 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 --- Comment #2 from Sandro Mani <manisandro(a)gmail.com> --- I believe this is https://github.com/harfbuzz/harfbuzz/pull/3162, which is fixed in harfbuzz 2.9.1+ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

2:47 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 --- Comment #3 from Parag Nemade <pnemade(a)redhat.com> --- Well, I can rebase harfbuzz to 2.9.1 version in F35 not 3.0.0+ versions. The 3.0.0 version created issues in Fedora and some packages need to be fixed manually. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Thursday, 6 January Thu, 6 Jan

5:19 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Parag Nemade <pnemade(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(mrehak(a)redhat.com | |) --- Comment #4 from Parag Nemade <pnemade(a)redhat.com> --- But where is simple reproducer that I can use and then test if above PR is really a fix? -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Tuesday, 11 January Tue, 11 Jan

7:26 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Marian Rehak <mrehak(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(mrehak(a)redhat.com | |) | -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Wednesday, 12 January Wed, 12 Jan

6:59 p.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Bug 2036820 depends on bug 2036822, which changed state. Bug 2036822 Summary: CVE-2021-45931 mingw-harfbuzz: harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036822 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Thursday, 13 January Thu, 13 Jan

4:21 p.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Garrett Tucker <gtucker(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2040517, 2040518, 2040516 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Tuesday, 18 January Tue, 18 Jan

10:53 p.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Jens Petersen <petersen(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Wednesday, 19 January Wed, 19 Jan

9:09 p.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 --- Comment #6 from Parag Nemade <pnemade(a)redhat.com> --- Yesterday I spend good amount of time on this CVE issue and concluded that those Feodra/RHEL releases which have only harfbuzz-2.9.0 build are affected. So actually No Fedora release is affected by this CVE. The code got introduced and fixed between 2.9.0 to 2.9.1 upstream release. So this CVE is actually NOTABUG. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Friday, 21 January Fri, 21 Jan

7:31 p.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Bug 2036820 depends on bug 2036821, which changed state. Bug 2036821 Summary: CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036821 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Tuesday, 15 February Tue, 15 Feb

1:06 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 Parag Nemade <pnemade(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |NOTABUG Status|ASSIGNED |CLOSED Last Closed| |2022-02-15 07:06:01 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

Friday, 16 February Fri, 16 Feb

3:18 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 --- Doc Text *updated* by TEJ RATHI <trathi(a)redhat.com> --- HarfBuzz is susceptible to an out-of-bounds write flaw arising from a boundary error in the hb_bit_set_invertible_t::set() function when processing untrusted input. An attacker, by creating a specially crafted file and enticing the victim to open it, can trigger an out-of-bounds write. In some cases, this could lead to the execution of arbitrary code on the target system or, more commonly, result in a denial-of-service attack. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

3:20 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 TEJ RATHI <trathi(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version| |harfbuzz 2.9.1 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

bugzilla＠redhat.com

9:20 a.m.

New subject: [Bug 2036820] CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set

https://bugzilla.redhat.com/show_bug.cgi?id=2036820 --- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> --- An out-of-bounds write flaw was found in HarfBuzz, arising from a boundary error in the hb_bit_set_invertible_t::set() function when processing untrusted input. This flaw allows an attacker to create a specially crafted file, convince the victim to open it, and trigger an out-of-bounds write. In some cases, this issue could lead to the execution of arbitrary code on the target system or, more commonly, result in a denial of service attack. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2036820

Reply

75

days inactive

848

days old

i18n-bugs@lists.fedoraproject.org

Manage subscription

16 comments

1 participants

tags (0)

participants (1)

bugzilla＠redhat.com