Stay Secure with the Latest Linux Advisories

security advisorycriticalsoftware patch

Fedora 43 mingw-harfbuzz Critical Null Pointer Dereference CVE-2026-22693

Backport patch for CVE-2026-22693.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-dc77eb63ae 2026-01-27 04:51:32.146738+00:00 -------------------------------------------------------------------------------- Name : mingw-harfbuzz Product : Fedora 43 Version : 11.5.1 Release : 2.fc43 URL : http://www.harfbuzz.org Summary : MinGW Windows Harfbuzz library Description : HarfBuzz is an implementation of the OpenType Layout engine. -------------------------------------------------------------------------------- Update Information: Backport patch for CVE-2026-22693. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 17 2026 Sandro Mani - 11.5.1-2 - Backport patch for CVE-2026-22693 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2429284 - CVE-2026-22693 mingw-harfbuzz: Null Pointer Dereference in harfbuzz [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2429284 [ 2 ] Bug #2429295 - CVE-2026-22693 mingw-harfbuzz: Null Pointer Dereference in harfbuzz [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2429295 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dc77eb63ae' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. Tounsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Critical patch for mingw-harfbuzz in Fedora 43 addressing CVE-2026-22693 to fix null pointer dereference issue.. mingw-harfbuzz security patch Fedora 43 CVE-2026-22693 null pointer. . Severity: Critical. LinuxSecurity.com Team

Jan 27, 2026 •Critical Fedora