Msrc Cbl2 Harfbuzz 3.4.0-3 On Cbl Mariner 2.0 vulnerabilities

CVE-2026-22693 [MEDIUM] CWE-476 Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2023-25193 [HIGH] CWE-770 hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks. hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is