hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
{ "binaries": [ { "binary_version": "2.6.4-1ubuntu4.3", "binary_name": "gir1.2-harfbuzz-0.0" }, { "binary_version": "2.6.4-1ubuntu4.3", "binary_name": "libharfbuzz-bin" }, { "binary_version": "2.6.4-1ubuntu4.3", "binary_name": "libharfbuzz-dev" }, { "binary_version": "2.6.4-1ubuntu4.3", "binary_name": "libharfbuzz-gobject0" }, { "binary_version": "2.6.4-1ubuntu4.3", "binary_name": "libharfbuzz-icu0" }, { "binary_version": "2.6.4-1ubuntu4.3", "binary_name": "libharfbuzz0b" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "17.0.8+7-1~20.04.2", "binary_name": "openjdk-17-demo" }, { "binary_version": "17.0.8+7-1~20.04.2", "binary_name": "openjdk-17-jdk" }, { "binary_version": "17.0.8+7-1~20.04.2", "binary_name": "openjdk-17-jdk-headless" }, { "binary_version": "17.0.8+7-1~20.04.2", "binary_name": "openjdk-17-jre" }, { "binary_version": "17.0.8+7-1~20.04.2", "binary_name": "openjdk-17-jre-headless" }, { "binary_version": "17.0.8+7-1~20.04.2", "binary_name": "openjdk-17-jre-zero" }, { "binary_version": "17.0.8+7-1~20.04.2", "binary_name": "openjdk-17-source" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "11.0.20+8-1ubuntu1~20.04", "binary_name": "openjdk-11-demo" }, { "binary_version": "11.0.20+8-1ubuntu1~20.04", "binary_name": "openjdk-11-jdk" }, { "binary_version": "11.0.20+8-1ubuntu1~20.04", "binary_name": "openjdk-11-jdk-headless" }, { "binary_version": "11.0.20+8-1ubuntu1~20.04", "binary_name": "openjdk-11-jre" }, { "binary_version": "11.0.20+8-1ubuntu1~20.04", "binary_name": "openjdk-11-jre-headless" }, { "binary_version": "11.0.20+8-1ubuntu1~20.04", "binary_name": "openjdk-11-jre-zero" }, { "binary_version": "11.0.20+8-1ubuntu1~20.04", "binary_name": "openjdk-11-source" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "2.7.4-1ubuntu3.2", "binary_name": "gir1.2-harfbuzz-0.0" }, { "binary_version": "2.7.4-1ubuntu3.2", "binary_name": "libharfbuzz-bin" }, { "binary_version": "2.7.4-1ubuntu3.2", "binary_name": "libharfbuzz-dev" }, { "binary_version": "2.7.4-1ubuntu3.2", "binary_name": "libharfbuzz-gobject0" }, { "binary_version": "2.7.4-1ubuntu3.2", "binary_name": "libharfbuzz-icu0" }, { "binary_version": "2.7.4-1ubuntu3.2", "binary_name": "libharfbuzz0b" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "17.0.8+7-1~22.04", "binary_name": "openjdk-17-demo" }, { "binary_version": "17.0.8+7-1~22.04", "binary_name": "openjdk-17-jdk" }, { "binary_version": "17.0.8+7-1~22.04", "binary_name": "openjdk-17-jdk-headless" }, { "binary_version": "17.0.8+7-1~22.04", "binary_name": "openjdk-17-jre" }, { "binary_version": "17.0.8+7-1~22.04", "binary_name": "openjdk-17-jre-headless" }, { "binary_version": "17.0.8+7-1~22.04", "binary_name": "openjdk-17-jre-zero" }, { "binary_version": "17.0.8+7-1~22.04", "binary_name": "openjdk-17-source" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "18.0.2+9-2~22.04", "binary_name": "openjdk-18-demo" }, { "binary_version": "18.0.2+9-2~22.04", "binary_name": "openjdk-18-jdk" }, { "binary_version": "18.0.2+9-2~22.04", "binary_name": "openjdk-18-jdk-headless" }, { "binary_version": "18.0.2+9-2~22.04", "binary_name": "openjdk-18-jre" }, { "binary_version": "18.0.2+9-2~22.04", "binary_name": "openjdk-18-jre-headless" }, { "binary_version": "18.0.2+9-2~22.04", "binary_name": "openjdk-18-jre-zero" }, { "binary_version": "18.0.2+9-2~22.04", "binary_name": "openjdk-18-source" } ] }
{ "binaries": [ { "binary_version": "19.0.2+7-0ubuntu3~22.04", "binary_name": "openjdk-19-demo" }, { "binary_version": "19.0.2+7-0ubuntu3~22.04", "binary_name": "openjdk-19-jdk" }, { "binary_version": "19.0.2+7-0ubuntu3~22.04", "binary_name": "openjdk-19-jdk-headless" }, { "binary_version": "19.0.2+7-0ubuntu3~22.04", "binary_name": "openjdk-19-jre" }, { "binary_version": "19.0.2+7-0ubuntu3~22.04", "binary_name": "openjdk-19-jre-headless" }, { "binary_version": "19.0.2+7-0ubuntu3~22.04", "binary_name": "openjdk-19-jre-zero" }, { "binary_version": "19.0.2+7-0ubuntu3~22.04", "binary_name": "openjdk-19-source" } ] }
{ "binaries": [ { "binary_version": "21.0.1+12-2~22.04", "binary_name": "openjdk-21-demo" }, { "binary_version": "21.0.1+12-2~22.04", "binary_name": "openjdk-21-jdk" }, { "binary_version": "21.0.1+12-2~22.04", "binary_name": "openjdk-21-jdk-headless" }, { "binary_version": "21.0.1+12-2~22.04", "binary_name": "openjdk-21-jre" }, { "binary_version": "21.0.1+12-2~22.04", "binary_name": "openjdk-21-jre-headless" }, { "binary_version": "21.0.1+12-2~22.04", "binary_name": "openjdk-21-jre-zero" }, { "binary_version": "21.0.1+12-2~22.04", "binary_name": "openjdk-21-source" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "11.0.20+8-1ubuntu1~22.04", "binary_name": "openjdk-11-demo" }, { "binary_version": "11.0.20+8-1ubuntu1~22.04", "binary_name": "openjdk-11-jdk" }, { "binary_version": "11.0.20+8-1ubuntu1~22.04", "binary_name": "openjdk-11-jdk-headless" }, { "binary_version": "11.0.20+8-1ubuntu1~22.04", "binary_name": "openjdk-11-jre" }, { "binary_version": "11.0.20+8-1ubuntu1~22.04", "binary_name": "openjdk-11-jre-headless" }, { "binary_version": "11.0.20+8-1ubuntu1~22.04", "binary_name": "openjdk-11-jre-zero" }, { "binary_version": "11.0.20+8-1ubuntu1~22.04", "binary_name": "openjdk-11-source" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "11.0.20+8-1ubuntu1", "binary_name": "openjdk-11-demo" }, { "binary_version": "11.0.20+8-1ubuntu1", "binary_name": "openjdk-11-jdk" }, { "binary_version": "11.0.20+8-1ubuntu1", "binary_name": "openjdk-11-jdk-headless" }, { "binary_version": "11.0.20+8-1ubuntu1", "binary_name": "openjdk-11-jre" }, { "binary_version": "11.0.20+8-1ubuntu1", "binary_name": "openjdk-11-jre-headless" }, { "binary_version": "11.0.20+8-1ubuntu1", "binary_name": "openjdk-11-jre-zero" }, { "binary_version": "11.0.20+8-1ubuntu1", "binary_name": "openjdk-11-source" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "9~b114-0ubuntu1", "binary_name": "openjdk-9-demo" }, { "binary_version": "9~b114-0ubuntu1", "binary_name": "openjdk-9-jdk" }, { "binary_version": "9~b114-0ubuntu1", "binary_name": "openjdk-9-jdk-headless" }, { "binary_version": "9~b114-0ubuntu1", "binary_name": "openjdk-9-jre" }, { "binary_version": "9~b114-0ubuntu1", "binary_name": "openjdk-9-jre-headless" }, { "binary_version": "9~b114-0ubuntu1", "binary_name": "openjdk-9-source" } ] }
{ "binaries": [ { "binary_version": "1.7.2-1ubuntu1", "binary_name": "gir1.2-harfbuzz-0.0" }, { "binary_version": "1.7.2-1ubuntu1", "binary_name": "libharfbuzz-bin" }, { "binary_version": "1.7.2-1ubuntu1", "binary_name": "libharfbuzz-dev" }, { "binary_version": "1.7.2-1ubuntu1", "binary_name": "libharfbuzz-gobject0" }, { "binary_version": "1.7.2-1ubuntu1", "binary_name": "libharfbuzz-icu0" }, { "binary_version": "1.7.2-1ubuntu1", "binary_name": "libharfbuzz0b" } ] }
{ "binaries": [ { "binary_version": "11.0.20+8-1ubuntu1~18.04", "binary_name": "openjdk-11-demo" }, { "binary_version": "11.0.20+8-1ubuntu1~18.04", "binary_name": "openjdk-11-jdk" }, { "binary_version": "11.0.20+8-1ubuntu1~18.04", "binary_name": "openjdk-11-jdk-headless" }, { "binary_version": "11.0.20+8-1ubuntu1~18.04", "binary_name": "openjdk-11-jre" }, { "binary_version": "11.0.20+8-1ubuntu1~18.04", "binary_name": "openjdk-11-jre-headless" }, { "binary_version": "11.0.20+8-1ubuntu1~18.04", "binary_name": "openjdk-11-jre-zero" }, { "binary_version": "11.0.20+8-1ubuntu1~18.04", "binary_name": "openjdk-11-source" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "17.0.8+7-1~18.04", "binary_name": "openjdk-17-demo" }, { "binary_version": "17.0.8+7-1~18.04", "binary_name": "openjdk-17-jdk" }, { "binary_version": "17.0.8+7-1~18.04", "binary_name": "openjdk-17-jdk-headless" }, { "binary_version": "17.0.8+7-1~18.04", "binary_name": "openjdk-17-jre" }, { "binary_version": "17.0.8+7-1~18.04", "binary_name": "openjdk-17-jre-headless" }, { "binary_version": "17.0.8+7-1~18.04", "binary_name": "openjdk-17-jre-zero" }, { "binary_version": "17.0.8+7-1~18.04", "binary_name": "openjdk-17-source" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "13.0.7+5-0ubuntu1~20.04", "binary_name": "openjdk-13-demo" }, { "binary_version": "13.0.7+5-0ubuntu1~20.04", "binary_name": "openjdk-13-jdk" }, { "binary_version": "13.0.7+5-0ubuntu1~20.04", "binary_name": "openjdk-13-jdk-headless" }, { "binary_version": "13.0.7+5-0ubuntu1~20.04", "binary_name": "openjdk-13-jre" }, { "binary_version": "13.0.7+5-0ubuntu1~20.04", "binary_name": "openjdk-13-jre-headless" }, { "binary_version": "13.0.7+5-0ubuntu1~20.04", "binary_name": "openjdk-13-jre-zero" }, { "binary_version": "13.0.7+5-0ubuntu1~20.04", "binary_name": "openjdk-13-source" } ] }
{ "binaries": [ { "binary_version": "16.0.1+9-1~20.04", "binary_name": "openjdk-16-demo" }, { "binary_version": "16.0.1+9-1~20.04", "binary_name": "openjdk-16-jdk" }, { "binary_version": "16.0.1+9-1~20.04", "binary_name": "openjdk-16-jdk-headless" }, { "binary_version": "16.0.1+9-1~20.04", "binary_name": "openjdk-16-jre" }, { "binary_version": "16.0.1+9-1~20.04", "binary_name": "openjdk-16-jre-headless" }, { "binary_version": "16.0.1+9-1~20.04", "binary_name": "openjdk-16-jre-zero" }, { "binary_version": "16.0.1+9-1~20.04", "binary_name": "openjdk-16-source" } ] }