Bug 856049 (CVE-2022-33068) – <media-libs/harfbuzz-4.4.0: integer overflow in png parsing

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description John Helmert III 2022-07-03 03:16:49 UTC]

CVE-2022-33068:

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Patch: https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593

Please stabilize 4.4.0 or newer.

[Comment 1 Larry the Git Cow 2022-09-14 07:32:05 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=292102f1f011f30515a6fcc20cf04f8305e26670

commit 292102f1f011f30515a6fcc20cf04f8305e26670
Author:     Andreas Sturmlechner <[e-mail]>
AuthorDate: 2022-09-13 19:32:58 +0000
Commit:     Andreas Sturmlechner <[e-mail]>
CommitDate: 2022-09-14 07:31:38 +0000

    media-libs/harfbuzz: cleanup vulnerable 4.3.0
    
    Bug: https://bugs.gentoo.org/856049
    Signed-off-by: Andreas Sturmlechner <[e-mail]>

 media-libs/harfbuzz/Manifest              |  1 -
 media-libs/harfbuzz/harfbuzz-4.3.0.ebuild | 98 -------------------------------
 2 files changed, 99 deletions(-)

[Comment 2 John Helmert III 2022-09-19 18:51:27 UTC]

GLSA request filed

[Comment 3 John Helmert III 2022-09-25 13:43:57 UTC]

GLSA released, all done!

[Comment 4 Larry the Git Cow 2022-09-25 13:57:10 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=1733373e809dacf94df6a7f9b4e247232c6d7154

commit 1733373e809dacf94df6a7f9b4e247232c6d7154
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2022-09-25 13:35:18 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2022-09-25 13:42:21 +0000

    [ GLSA 202209-11 ] HarfBuzz: Multiple vulnerabilities
    
    Bug: https://bugs.gentoo.org/830372
    Bug: https://bugs.gentoo.org/856049
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: John Helmert III <[e-mail]>

 glsa-202209-11.xml | 44 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)