# harfbuzz security updates

Patch Radar has 12 security fixes for harfbuzz, closing 4 CVEs. The newest is DEBIAN-CVE-2026-22693 (12.3.0-4), released January 10, 2026.

- Web page: https://patchblox.com/security/product/linux/harfbuzz
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-22693](https://patchblox.com/security/data/fix/linux/debian-cve-2026-22693.md) | Jan 10, 2026 | Debian 14 12.3.0-4 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-22693](https://patchblox.com/security/data/fix/linux/debian-cve-2026-22693.md) | Jan 10, 2026 | Debian 13.5 (trixie) 10.2.0-1+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-56732](https://patchblox.com/security/data/fix/linux/debian-cve-2024-56732.md) | Dec 27, 2024 | Debian 13.5 (trixie) 10.1.0-2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-56732](https://patchblox.com/security/data/fix/linux/debian-cve-2024-56732.md) | Dec 27, 2024 | Debian 14 10.1.0-2 | Routine | 1 | 0 |
| [RHSA-2024:2980](https://patchblox.com/security/data/fix/linux/rhsa-2024-2980.md) | May 22, 2024 | RHEL 8 0:1.7.5-4.el8 | High | 1 | 0 |
| [RHSA-2024:2410](https://patchblox.com/security/data/fix/linux/rhsa-2024-2410.md) | Apr 30, 2024 | RHEL 9 0:2.7.4-10.el9 | High | 1 | 0 |
| [DEBIAN-CVE-2023-25193](https://patchblox.com/security/data/fix/linux/debian-cve-2023-25193.md) | Feb 4, 2023 | Debian 13.5 (trixie) 8.0.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-25193](https://patchblox.com/security/data/fix/linux/debian-cve-2023-25193.md) | Feb 4, 2023 | Debian 14 8.0.0-1 | High | 1 | 0 |
| [RHSA-2022:8384](https://patchblox.com/security/data/fix/linux/rhsa-2022-8384.md) | Nov 15, 2022 | RHEL 9 0:2.7.4-8.el9 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-33068](https://patchblox.com/security/data/fix/linux/debian-cve-2022-33068.md) | Jun 23, 2022 | Debian 12.15 (bookworm) 5.2.0-2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-33068](https://patchblox.com/security/data/fix/linux/debian-cve-2022-33068.md) | Jun 23, 2022 | Debian 13.5 (trixie) 5.2.0-2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-33068](https://patchblox.com/security/data/fix/linux/debian-cve-2022-33068.md) | Jun 23, 2022 | Debian 14 5.2.0-2 | Routine | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo