Version in base suite: 25.2.3-2+deb13u4 Version in overlay suite: 25.2.3-2+deb13u5 Base version: libreoffice_25.2.3-2+deb13u5 Target version: libreoffice_25.2.3-2+deb13u6 Base file: /srv/ftp-master.debian.org/ftp/pool/main/libr/libreoffice/libreoffice_25.2.3-2+deb13u5.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/libr/libreoffice/libreoffice_25.2.3-2+deb13u6.dsc changelog | 8 +++ patches/check-for-hb_shape_full-failure.diff | 58 +++++++++++++++++++++++++++ patches/series | 1 3 files changed, 67 insertions(+) dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp2gjvvl4l/libreoffice_25.2.3-2+deb13u5.dsc: no acceptable signature found dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp2gjvvl4l/libreoffice_25.2.3-2+deb13u6.dsc: no acceptable signature found diff -Nru libreoffice-25.2.3/debian/changelog libreoffice-25.2.3/debian/changelog --- libreoffice-25.2.3/debian/changelog 2026-05-25 11:04:39.000000000 +0000 +++ libreoffice-25.2.3/debian/changelog 2026-06-06 20:12:08.000000000 +0000 @@ -1,3 +1,11 @@ +libreoffice (4:25.2.3-2+deb13u6) trixie; urgency=medium + + * debian/patches/check-for-hb_shape_full-failure.diff: add patch from + libreoffice-26-2 branch to gracefully handle hb_shape_full failure, + as can happen after the fix for CVE-2026-50593 in graphite2 + + -- Rene Engelhard Sat, 06 Jun 2026 22:12:08 +0200 + libreoffice (4:25.2.3-2+deb13u5) trixie-security; urgency=medium * debian/patches/CVE-2026-*.diff: fix diff -Nru libreoffice-25.2.3/debian/patches/check-for-hb_shape_full-failure.diff libreoffice-25.2.3/debian/patches/check-for-hb_shape_full-failure.diff --- libreoffice-25.2.3/debian/patches/check-for-hb_shape_full-failure.diff 1970-01-01 00:00:00.000000000 +0000 +++ libreoffice-25.2.3/debian/patches/check-for-hb_shape_full-failure.diff 2026-06-06 20:04:23.000000000 +0000 @@ -0,0 +1,58 @@ +From 47ad587ae515df86b1149b36bf12edc1424c5b90 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= +Date: Wed, 6 May 2026 15:37:30 +0100 +Subject: [PATCH] check for hb_shape_full failure +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Signed-off-by: Caolán McNamara +Change-Id: I5fafcb7d592fb4c9091cb2bab64cb6ac47462d71 +Reviewed-on: https://gerrit.collaboraoffice.com/c/online/+/2102 +Reviewed-by: Miklos Vajna +(cherry picked from commit 22c19be8fae977a90f83a82d8acccd0b46c7cf20) +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/204946 +Tested-by: Jenkins +Reviewed-by: Julien Nabet +--- + vcl/source/gdi/CommonSalLayout.cxx | 17 ++++++++++------- + 1 file changed, 10 insertions(+), 7 deletions(-) + +diff --git a/vcl/source/gdi/CommonSalLayout.cxx b/vcl/source/gdi/CommonSalLayout.cxx +index e6c376d1619a..51a60a945cee 100644 +--- a/vcl/source/gdi/CommonSalLayout.cxx ++++ b/vcl/source/gdi/CommonSalLayout.cxx +@@ -204,10 +204,11 @@ public: + // The shapers that we want HarfBuzz to use, in the order of + // preference. + const char* const pHbShapers[] = { "graphite2", "ot", "fallback", nullptr }; +- bool ok +- = hb_shape_full(pHbFont, m_pHbBuffer, maFeatures.data(), maFeatures.size(), pHbShapers); +- assert(ok); +- (void)ok; ++ if (!hb_shape_full(pHbFont, m_pHbBuffer, maFeatures.data(), maFeatures.size(), pHbShapers)) ++ { ++ SAL_WARN("vcl.harfbuzz", "hb_shape_full failed"); ++ hb_buffer_set_length(m_pHbBuffer, 0); ++ } + + int nRunGlyphCount = hb_buffer_get_length(m_pHbBuffer); + hb_glyph_info_t* pHbGlyphInfos = hb_buffer_get_glyph_infos(m_pHbBuffer, nullptr); +@@ -604,9 +605,11 @@ bool GenericSalLayout::LayoutText(vcl::text::ImplLayoutArgs& rArgs, const SalLay + // The shapers that we want HarfBuzz to use, in the order of + // preference. + const char*const pHbShapers[] = { "graphite2", "ot", "fallback", nullptr }; +- bool ok = hb_shape_full(pHbFont, pHbBuffer, maFeatures.data(), maFeatures.size(), pHbShapers); +- assert(ok); +- (void) ok; ++ if (!hb_shape_full(pHbFont, pHbBuffer, maFeatures.data(), maFeatures.size(), pHbShapers)) ++ { ++ SAL_WARN("vcl.harfbuzz", "hb_shape_full failed"); ++ hb_buffer_set_length(pHbBuffer, 0); ++ } + + // Populate glyph cluster remapping data + stClusterMapper.ShapeSubRun(pStr, nLength, aSubRun, pHbFont, maFeatures, oHbLanguage); +-- +2.47.3 + diff -Nru libreoffice-25.2.3/debian/patches/series libreoffice-25.2.3/debian/patches/series --- libreoffice-25.2.3/debian/patches/series 2026-05-25 08:48:22.000000000 +0000 +++ libreoffice-25.2.3/debian/patches/series 2026-06-06 20:11:29.000000000 +0000 @@ -62,3 +62,4 @@ CVE-2026-8356.diff CVE-2026-8357.diff CVE-2026-8358.diff +check-for-hb_shape_full-failure.diff