diff --git a/.gitignore b/.gitignore index 443fb4d..e13cb52 100644 --- a/.gitignore +++ b/.gitignore @@ -172,3 +172,7 @@ /harfbuzz-11.4.5.tar.xz /harfbuzz-11.5.0.tar.xz /harfbuzz-11.5.1.tar.xz +/harfbuzz-12.0.0.tar.xz +/harfbuzz-12.1.0.tar.xz +/harfbuzz-12.2.0.tar.xz +/harfbuzz-12.3.0.tar.xz diff --git a/1265ff8d990284f04d8768f35b0e20ae5f60daae.patch b/1265ff8d990284f04d8768f35b0e20ae5f60daae.patch deleted file mode 100644 index 81a02d6..0000000 --- a/1265ff8d990284f04d8768f35b0e20ae5f60daae.patch +++ /dev/null @@ -1,25 +0,0 @@ -From 1265ff8d990284f04d8768f35b0e20ae5f60daae Mon Sep 17 00:00:00 2001 -From: Behdad Esfahbod -Date: Fri, 9 Jan 2026 04:54:42 -0700 -Subject: [PATCH] [cmap] malloc fail test (#5710) - -Fixes https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww ---- - src/hb-ot-cmap-table.hh | 4 ++++ - 1 file changed, 4 insertions(+) - -diff --git a/src/hb-ot-cmap-table.hh b/src/hb-ot-cmap-table.hh -index 32f705bb3c5..d08e66edaa2 100644 ---- a/src/hb-ot-cmap-table.hh -+++ b/src/hb-ot-cmap-table.hh -@@ -1670,6 +1670,10 @@ struct SubtableUnicodesCache { - { - SubtableUnicodesCache* cache = - (SubtableUnicodesCache*) hb_malloc (sizeof(SubtableUnicodesCache)); -+ -+ if (unlikely (!cache)) -+ return nullptr; -+ - new (cache) SubtableUnicodesCache (source_table); - return cache; - } diff --git a/harfbuzz.spec b/harfbuzz.spec index bb213da..8f5f956 100644 --- a/harfbuzz.spec +++ b/harfbuzz.spec @@ -1,22 +1,12 @@ Name: harfbuzz -Version: 11.5.1 -Release: 2%{?dist} +Version: 12.3.0 +Release: 1%{?dist} Summary: Text shaping library License: MIT-Modern-Variant URL: https://github.com/harfbuzz/harfbuzz/ Source0: https://github.com/harfbuzz/harfbuzz/releases/download/%{version}/harfbuzz-%{version}.tar.xz -# [cmap] malloc fail test (#5710) -# https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae -# -# Fixes: -# -# Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS -# https://www.cve.org/CVERecord?id=CVE-2026-22693 -# https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww -Patch: https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae.patch - BuildRequires: cairo-devel BuildRequires: freetype-devel BuildRequires: glib2-devel @@ -120,8 +110,17 @@ This package contains Harfbuzz Cairo support library. %{_libdir}/libharfbuzz-cairo.so.* %changelog -* Wed Jan 14 2026 Parag Nemade - 11.5.1-2 -- Backport security fix for CVE-2026-22693 (fix RHBZ#2429288) +* Sun Dec 28 2025 Parag Nemade - 12.3.0-1 +- Update to 12.3.0 version (#2425647) + +* Fri Nov 07 2025 Parag Nemade - 12.2.0-1 +- Update to 12.2.0 version (#2412425) + +* Thu Oct 02 2025 Parag Nemade - 12.1.0-1 +- Update to 12.1.0 version (#2400640) + +* Sun Sep 28 2025 Parag Nemade - 12.0.0-1 +- Update to 12.0.0 version (#2399955) * Tue Sep 23 2025 Parag Nemade - 11.5.1-1 - Update to 11.5.1 version (#2397450) diff --git a/sources b/sources index 4df73bd..7199718 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (harfbuzz-11.5.1.tar.xz) = c5525837cba6fd2d79660ffcf4069b107fa60eec21daeb89fb529c9b2a388392e92aca896c503fdd9545050ffc8e831281141fcfe816fee74b997a465ff2b528 +SHA512 (harfbuzz-12.3.0.tar.xz) = 7452379ee35b312cb83b5365e480dd2cc73813fa5eb489988ea7b02fa7e8137de66ea10ef71fcbbfb3275013247c46ede3f28ac9ef92c1213424ea0b0a077b03