#1143466 please upgrade to 14.3.0+

Package:
src:harfbuzz
Source:
src:harfbuzz
Submitter:
Rene Engelhard
Date:
2026-08-02 14:23:01 UTC
Severity:
normal
#1143466#5
Date:
2026-08-02 09:34:18 UTC
From:
To:
Hi,

please upgrade to a current harfbuzz. At least 14.3+ (and keep it
uptodate..)

https://git.libreoffice.org/core/+/4a5ab992031cf28993aa03054393d40e2c0596c8%5E%21

requires LibreOffice 27.2+ for next years February (and thus still forky
material!) to require harfbuzz 14.3.0+.

The follow-up commits for this make this very clear, see e.g.

https://git.libreoffice.org/core/+/57004bb7b84dc8cdcd6759fe2d1534365c73fd70%5E%21
(ok right now)
https://git.libreoffice.org/core/+/57004bb7b84dc8cdcd6759fe2d1534365c73fd70%5E%21
(ok right now)
https://git.libreoffice.org/core/+/c7535eacf0842d67308725a09e64b14b94a851ba%5E%21
https://git.libreoffice.org/core/+/386b7ad7191429d46cd819baeefab9d4987d73bf%5E%21
and especially
https://git.libreoffice.org/core/+/11516b4e81391575dc38dfadf8ceb63d962fdd78%5E%21

I think using internal harfbuzz here is bad, let alone security-wise.

Regards,

Rene
#1143466#10
Date:
2026-08-02 14:20:33 UTC
From:
To:
Hi,


and e.g. https://git.libreoffice.org/core/+/6f42fc2c210346e4cce96a870a538efcab3f0d22%5E%21 which uses the new API from 14.3.0 onwards

(hb_ot_fetch_bits())


Regards,


Rene