hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
{ "binaries": [ { "binary_name": "openjdk-9-demo", "binary_version": "9~b114-0ubuntu1" }, { "binary_name": "openjdk-9-jdk", "binary_version": "9~b114-0ubuntu1" }, { "binary_name": "openjdk-9-jdk-headless", "binary_version": "9~b114-0ubuntu1" }, { "binary_name": "openjdk-9-jre", "binary_version": "9~b114-0ubuntu1" }, { "binary_name": "openjdk-9-jre-headless", "binary_version": "9~b114-0ubuntu1" }, { "binary_name": "openjdk-9-source", "binary_version": "9~b114-0ubuntu1" } ] }
{ "binaries": [ { "binary_name": "gir1.2-harfbuzz-0.0", "binary_version": "1.7.2-1ubuntu1" }, { "binary_name": "libharfbuzz-bin", "binary_version": "1.7.2-1ubuntu1" }, { "binary_name": "libharfbuzz-dev", "binary_version": "1.7.2-1ubuntu1" }, { "binary_name": "libharfbuzz-gobject0", "binary_version": "1.7.2-1ubuntu1" }, { "binary_name": "libharfbuzz-icu0", "binary_version": "1.7.2-1ubuntu1" }, { "binary_name": "libharfbuzz0b", "binary_version": "1.7.2-1ubuntu1" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.20+8-1ubuntu1~18.04" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.20+8-1ubuntu1~18.04" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.20+8-1ubuntu1~18.04" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.20+8-1ubuntu1~18.04" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.20+8-1ubuntu1~18.04" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.20+8-1ubuntu1~18.04" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.20+8-1ubuntu1~18.04" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "openjdk-17-demo", "binary_version": "17.0.8+7-1~18.04" }, { "binary_name": "openjdk-17-jdk", "binary_version": "17.0.8+7-1~18.04" }, { "binary_name": "openjdk-17-jdk-headless", "binary_version": "17.0.8+7-1~18.04" }, { "binary_name": "openjdk-17-jre", "binary_version": "17.0.8+7-1~18.04" }, { "binary_name": "openjdk-17-jre-headless", "binary_version": "17.0.8+7-1~18.04" }, { "binary_name": "openjdk-17-jre-zero", "binary_version": "17.0.8+7-1~18.04" }, { "binary_name": "openjdk-17-source", "binary_version": "17.0.8+7-1~18.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "gir1.2-harfbuzz-0.0", "binary_version": "2.6.4-1ubuntu4.3" }, { "binary_name": "libharfbuzz-bin", "binary_version": "2.6.4-1ubuntu4.3" }, { "binary_name": "libharfbuzz-dev", "binary_version": "2.6.4-1ubuntu4.3" }, { "binary_name": "libharfbuzz-gobject0", "binary_version": "2.6.4-1ubuntu4.3" }, { "binary_name": "libharfbuzz-icu0", "binary_version": "2.6.4-1ubuntu4.3" }, { "binary_name": "libharfbuzz0b", "binary_version": "2.6.4-1ubuntu4.3" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "openjdk-17-demo", "binary_version": "17.0.8+7-1~20.04.2" }, { "binary_name": "openjdk-17-jdk", "binary_version": "17.0.8+7-1~20.04.2" }, { "binary_name": "openjdk-17-jdk-headless", "binary_version": "17.0.8+7-1~20.04.2" }, { "binary_name": "openjdk-17-jre", "binary_version": "17.0.8+7-1~20.04.2" }, { "binary_name": "openjdk-17-jre-headless", "binary_version": "17.0.8+7-1~20.04.2" }, { "binary_name": "openjdk-17-jre-zero", "binary_version": "17.0.8+7-1~20.04.2" }, { "binary_name": "openjdk-17-source", "binary_version": "17.0.8+7-1~20.04.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.20+8-1ubuntu1~20.04" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.20+8-1ubuntu1~20.04" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.20+8-1ubuntu1~20.04" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.20+8-1ubuntu1~20.04" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.20+8-1ubuntu1~20.04" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.20+8-1ubuntu1~20.04" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.20+8-1ubuntu1~20.04" } ] }
{ "binaries": [ { "binary_name": "openjdk-13-demo", "binary_version": "13.0.7+5-0ubuntu1~20.04" }, { "binary_name": "openjdk-13-jdk", "binary_version": "13.0.7+5-0ubuntu1~20.04" }, { "binary_name": "openjdk-13-jdk-headless", "binary_version": "13.0.7+5-0ubuntu1~20.04" }, { "binary_name": "openjdk-13-jre", "binary_version": "13.0.7+5-0ubuntu1~20.04" }, { "binary_name": "openjdk-13-jre-headless", "binary_version": "13.0.7+5-0ubuntu1~20.04" }, { "binary_name": "openjdk-13-jre-zero", "binary_version": "13.0.7+5-0ubuntu1~20.04" }, { "binary_name": "openjdk-13-source", "binary_version": "13.0.7+5-0ubuntu1~20.04" } ] }
{ "binaries": [ { "binary_name": "openjdk-16-demo", "binary_version": "16.0.1+9-1~20.04" }, { "binary_name": "openjdk-16-jdk", "binary_version": "16.0.1+9-1~20.04" }, { "binary_name": "openjdk-16-jdk-headless", "binary_version": "16.0.1+9-1~20.04" }, { "binary_name": "openjdk-16-jre", "binary_version": "16.0.1+9-1~20.04" }, { "binary_name": "openjdk-16-jre-headless", "binary_version": "16.0.1+9-1~20.04" }, { "binary_name": "openjdk-16-jre-zero", "binary_version": "16.0.1+9-1~20.04" }, { "binary_name": "openjdk-16-source", "binary_version": "16.0.1+9-1~20.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "gir1.2-harfbuzz-0.0", "binary_version": "2.7.4-1ubuntu3.2" }, { "binary_name": "libharfbuzz-bin", "binary_version": "2.7.4-1ubuntu3.2" }, { "binary_name": "libharfbuzz-dev", "binary_version": "2.7.4-1ubuntu3.2" }, { "binary_name": "libharfbuzz-gobject0", "binary_version": "2.7.4-1ubuntu3.2" }, { "binary_name": "libharfbuzz-icu0", "binary_version": "2.7.4-1ubuntu3.2" }, { "binary_name": "libharfbuzz0b", "binary_version": "2.7.4-1ubuntu3.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "openjdk-17-demo", "binary_version": "17.0.8+7-1~22.04" }, { "binary_name": "openjdk-17-jdk", "binary_version": "17.0.8+7-1~22.04" }, { "binary_name": "openjdk-17-jdk-headless", "binary_version": "17.0.8+7-1~22.04" }, { "binary_name": "openjdk-17-jre", "binary_version": "17.0.8+7-1~22.04" }, { "binary_name": "openjdk-17-jre-headless", "binary_version": "17.0.8+7-1~22.04" }, { "binary_name": "openjdk-17-jre-zero", "binary_version": "17.0.8+7-1~22.04" }, { "binary_name": "openjdk-17-source", "binary_version": "17.0.8+7-1~22.04" } ] }
{ "binaries": [ { "binary_name": "openjdk-18-demo", "binary_version": "18.0.2+9-2~22.04" }, { "binary_name": "openjdk-18-jdk", "binary_version": "18.0.2+9-2~22.04" }, { "binary_name": "openjdk-18-jdk-headless", "binary_version": "18.0.2+9-2~22.04" }, { "binary_name": "openjdk-18-jre", "binary_version": "18.0.2+9-2~22.04" }, { "binary_name": "openjdk-18-jre-headless", "binary_version": "18.0.2+9-2~22.04" }, { "binary_name": "openjdk-18-jre-zero", "binary_version": "18.0.2+9-2~22.04" }, { "binary_name": "openjdk-18-source", "binary_version": "18.0.2+9-2~22.04" } ] }
{ "binaries": [ { "binary_name": "openjdk-19-demo", "binary_version": "19.0.2+7-0ubuntu3~22.04" }, { "binary_name": "openjdk-19-jdk", "binary_version": "19.0.2+7-0ubuntu3~22.04" }, { "binary_name": "openjdk-19-jdk-headless", "binary_version": "19.0.2+7-0ubuntu3~22.04" }, { "binary_name": "openjdk-19-jre", "binary_version": "19.0.2+7-0ubuntu3~22.04" }, { "binary_name": "openjdk-19-jre-headless", "binary_version": "19.0.2+7-0ubuntu3~22.04" }, { "binary_name": "openjdk-19-jre-zero", "binary_version": "19.0.2+7-0ubuntu3~22.04" }, { "binary_name": "openjdk-19-source", "binary_version": "19.0.2+7-0ubuntu3~22.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "openjdk-21-demo", "binary_version": "21.0.1+12-2~22.04" }, { "binary_name": "openjdk-21-jdk", "binary_version": "21.0.1+12-2~22.04" }, { "binary_name": "openjdk-21-jdk-headless", "binary_version": "21.0.1+12-2~22.04" }, { "binary_name": "openjdk-21-jre", "binary_version": "21.0.1+12-2~22.04" }, { "binary_name": "openjdk-21-jre-headless", "binary_version": "21.0.1+12-2~22.04" }, { "binary_name": "openjdk-21-jre-zero", "binary_version": "21.0.1+12-2~22.04" }, { "binary_name": "openjdk-21-source", "binary_version": "21.0.1+12-2~22.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.20+8-1ubuntu1~22.04" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.20+8-1ubuntu1~22.04" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.20+8-1ubuntu1~22.04" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.20+8-1ubuntu1~22.04" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.20+8-1ubuntu1~22.04" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.20+8-1ubuntu1~22.04" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.20+8-1ubuntu1~22.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.20+8-1ubuntu1" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.20+8-1ubuntu1" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.20+8-1ubuntu1" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.20+8-1ubuntu1" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.20+8-1ubuntu1" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.20+8-1ubuntu1" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.20+8-1ubuntu1" } ] }