# harfbuzz-icu security updates

Patch Radar has 13 security fixes for harfbuzz-icu, closing 5 CVEs. The newest is FEDORA-2026-B38FE572EF (11.5.1-2.fc43), released January 14, 2026.

- Web page: https://patchblox.com/security/product/linux/harfbuzz-icu
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [FEDORA-2026-B38FE572EF](https://patchblox.com/security/data/fix/linux/fedora-2026-b38fe572ef.md) | Jan 14, 2026 | Fedora 43 11.5.1-2.fc43 | Routine | 1 | 0 |
| [ALAS2023-2025-848](https://patchblox.com/security/data/fix/linux/alas2023-2025-848.md) | Feb 12, 2025 | amzn 2023 7.0.0-2.amzn2023.0.2 | Routine | 1 | 0 |
| [ELSA-2024-2980](https://patchblox.com/security/data/fix/linux/elsa-2024-2980.md) | May 23, 2024 | ol 8 0:1.7.5-4.el8 | High | 1 | 0 |
| [ALSA-2024:2980](https://patchblox.com/security/data/fix/linux/alsa-2024-2980.md) | May 22, 2024 | almalinux 8 1.7.5-4.el8 | High | 1 | 0 |
| [RHSA-2024:2980](https://patchblox.com/security/data/fix/linux/rhsa-2024-2980.md) | May 22, 2024 | RHEL 8 0:1.7.5-4.el8 | High | 1 | 0 |
| [ELSA-2024-2410](https://patchblox.com/security/data/fix/linux/elsa-2024-2410.md) | May 2, 2024 | ol 9 0:2.7.4-10.el9 | High | 1 | 0 |
| [ALSA-2024:2410](https://patchblox.com/security/data/fix/linux/alsa-2024-2410.md) | Apr 30, 2024 | almalinux 9 2.7.4-10.el9 | High | 1 | 0 |
| [RHSA-2024:2410](https://patchblox.com/security/data/fix/linux/rhsa-2024-2410.md) | Apr 30, 2024 | RHEL 9 0:2.7.4-10.el9 | High | 1 | 0 |
| [ALAS2023-2023-111](https://patchblox.com/security/data/fix/linux/alas2023-2023-111.md) | Feb 21, 2023 | amzn 2023 7.0.0-2.amzn2023.0.1 | High | 2 | 0 |
| [ALAS2023-2023-036](https://patchblox.com/security/data/fix/linux/alas2023-2023-036.md) | Feb 17, 2023 | amzn 2023 2.9.1-1.amzn2023.0.3 | Routine | 1 | 0 |
| [ELSA-2022-8384](https://patchblox.com/security/data/fix/linux/elsa-2022-8384.md) | Nov 22, 2022 | ol 9 0:2.7.4-8.el9 | Routine | 1 | 0 |
| [ALSA-2022:8384](https://patchblox.com/security/data/fix/linux/alsa-2022-8384.md) | Nov 15, 2022 | almalinux 9 2.7.4-8.el9 | Routine | 1 | 0 |
| [RHSA-2022:8384](https://patchblox.com/security/data/fix/linux/rhsa-2022-8384.md) | Nov 15, 2022 | RHEL 9 0:2.7.4-8.el9 | Routine | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo