-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-b3b5ac4053 2022-01-22 01:31:33.333208 --------------------------------------------------------------------------------
Name : harfbuzz Product : Fedora 35 Version : 2.9.1 Release : 1.fc35 URL : https://harfbuzz.github.io/ Summary : Text shaping library Description : HarfBuzz is an implementation of the OpenType Layout engine.
-------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-45931 -------------------------------------------------------------------------------- ChangeLog:
* Mon Sep 13 2021 Parag Nemade <pnemade AT redhat DOT com> - 2.9.1-1 - Update to 2.9.1 version (#2002020) * Fri Aug 20 2021 Parag Nemade <pnemade AT redhat DOT com> - 2.9.0-1 - Update to 2.9.0 version (#1995436) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2036820 - CVE-2021-45931 harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set https://bugzilla.redhat.com/show_bug.cgi?id=2036820 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-b3b5ac4053' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------