Source: harfbuzz Version: 12.3.2-2 Severity: wishlist X-Debbugs-Cc: [email protected]
Hi, please upgrade to a current harfbuzz. At least 14.3+ (and keep it uptodate..) https://git.libreoffice.org/core/+/4a5ab992031cf28993aa03054393d40e2c0596c8%5E%21 requires LibreOffice 27.2+ for next years February (and thus still forky material!) to require harfbuzz 14.3.0+. The follow-up commits for this make this very clear, see e.g. https://git.libreoffice.org/core/+/57004bb7b84dc8cdcd6759fe2d1534365c73fd70%5E%21 (ok right now) https://git.libreoffice.org/core/+/57004bb7b84dc8cdcd6759fe2d1534365c73fd70%5E%21 (ok right now) https://git.libreoffice.org/core/+/c7535eacf0842d67308725a09e64b14b94a851ba%5E%21 https://git.libreoffice.org/core/+/386b7ad7191429d46cd819baeefab9d4987d73bf%5E%21 and especially https://git.libreoffice.org/core/+/11516b4e81391575dc38dfadf8ceb63d962fdd78%5E%21 I think using internal harfbuzz here is bad, let alone security-wise. Regards, Rene
