Back Linuxsecurity

Fedora 42 mingw-harfbuzz Critical Null Pointer Issue FEDORA-2026

Linuxsecurity •LinuxSecurity Advisories • January 26, 2026

Share: View original

HarfBuzz is an implementation of the OpenType Layout engine. Update Information : Backport patch for CVE-2026-22693.

HarfBuzz is an implementation of the OpenType Layout engine.

Backport patch for CVE-2026-22693.

* Sat Jan 17 2026 Sandro Mani - 10.2.0-3 - Backport patch for CVE-2026-22693

[ 1 ] Bug #2429284 - CVE-2026-22693 mingw-harfbuzz: Null Pointer Dereference in harfbuzz [fedora-42] [ 2 ] Bug #2429295 - CVE-2026-22693 mingw-harfbuzz: Null Pointer Dereference in harfbuzz [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2301995d0a' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Null Pointer Issue in HarfBuzz Affects Fedora 42 and 43 A critical null pointer dereference vulnerability, identified as CVE-2026-22693, affects the HarfBuzz implementation in Fedora 42 and 43. Backport patches have been released to address this issue, with Fedora 42 receiving its update on January 17, 2026, and Fedora 43 on January 14, 2026. 3 sources 37

Extracted Entities

Companies (1)

Fedora

CVEs (1)

CVE-2026-22693