openSUSE Security Advisory (SUSE-SU-2026:0287-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : harfbuzz (2026-bac983cf83)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bac983cf83 advisory. Backport security fix for CVE-2026-22693 fix RHBZ2429278 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

[SECURITY] Fedora 43 Update: mingw-harfbuzz-11.5.1-2.fc43

HarfBuzz is an implementation of the OpenType Layout engine...

SUSE SLED15: harfbuzz-devel / harfbuzz-tools / libharfbuzz-cairo0 / etc (SUSE-SU-2026:0287-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0287-1 advisory. - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create bsc1256459. Tenable h...

[SECURITY] Fedora 42 Update: mingw-harfbuzz-10.2.0-3.fc42

HarfBuzz is an implementation of the OpenType Layout engine...

Fedora 42 : mingw-harfbuzz (2026-2301995d0a)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2301995d0a advisory. Backport patch for CVE-2026-22693. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

PT-2026-4813

Critical HarfBuzz Vulnerability Analysis - SUSE-2026-0287-1 The recent patch for HarfBuzz CVE-2025-53086 addresses a classic yet dangerous heap corruption bug. Read more: 👉 https://t.co/nFbw9Hr1kZ OpenSUSE Security https://t.co/ZDH04WBByX...

Fedora: Security Advisory (FEDORA-2026-dc77eb63ae)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-2301995d0a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROOT-OS-DEBIAN-13-CVE-2026-22693 CVE-2026-22693 in rootio-harfbuzz - Patched by Root

Root has patched CVE-2026-22693 in the rootio-harfbuzz package for Root:Debian:13. Multiple fixed versions available...

Fedora 43 : mingw-harfbuzz (2026-dc77eb63ae)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dc77eb63ae advisory. Backport patch for CVE-2026-22693. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

OSV-2026-121 Use-of-uninitialized-value in trySubset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477657796 Crash type: Use-of-uninitialized-value Crash state: trySubset hb-subset-fuzzer.cc...

SUSE-SU-2026:0287-1 Security update for harfbuzz

This update for harfbuzz fixes the following issues: - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create bsc1256459...

OESA-2026-1204 harfbuzz security update

HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in...

OESA-2026-1203 harfbuzz security update

HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in...

Updated harfbuzz packages fix security vulnerability

Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS. CVE-2026-22693...

MGASA-2026-0015 Updated harfbuzz packages fix security vulnerability

Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS. CVE-2026-22693...

Mageia: Security Advisory (MGASA-2026-0015)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Linux 3.0 Security Update: harfbuzz / qtbase (CVE-2024-56732)

The version of harfbuzz / qtbase installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56732 advisory. - HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buff...

Linux Distros Unpatched Vulnerability : CVE-2026-0943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. Versions before 0.032 contain HarfBuzz...