Version 3.119.2
Security hardening release · Released · NuGet · GitHub Release
API changes · SkiaSharp API diff · HarfBuzzSharp 8.3.1.3
Highlights
This servicing release focuses on hardening the native Windows and Linux libraries while also filling a small tvOS API gap. The line now carries Spectre mitigations, Control Flow Guard, and Buffer Security Check coverage for native builds, and HarfBuzzSharp 8.3.1.3 ships alongside the release via the linked companion page.
Breaking Changes
None in this release.
New Features
Platform
- Missing tvOS
SKSurface.Createoverloads — Adds the missing tvOS overloads to align the API more closely with the other Apple platforms. ❤️ @MartinZikmund (#3342) - Android symbol packages — Preserves and packs Android symbols to improve diagnostics for native issues. (#3374)
Security
- Spectre mitigations for Windows native libraries — Adds Spectre hardening to the Windows DLLs in this servicing line. (#3497)
- Spectre mitigations for Linux native libraries — Extends the same Spectre hardening work to
libSkiaSharp.so. (#3503) - Control Flow Guard — Enables CFG for all Windows native DLLs. ❤️ @Aguilex (#3397)
- Buffer Security Check — Enables
/GSprotections for the native Windows DLLs. ❤️ @Aguilex (#3404)
Platform Support
| Platform | What's New |
|---|---|
| 🍎 Apple | Added the missing tvOS SKSurface.Create overloads |
| 🪟 Windows | Spectre mitigation, Control Flow Guard, Buffer Security Check |
| 🐧 Linux | Spectre mitigation for libSkiaSharp.so |
| 🤖 Android | Symbol packages preserved for diagnostics |
Community Contributors ❤️
| Contributor | What They Did |
|---|---|
| @MartinZikmund | Added the missing tvOS SKSurface.Create overloads |
| @Aguilex | Enabled CFG and Buffer Security Check for Windows native binaries |
Links
Preview 3 (February 5, 2026)
Added Spectre mitigations for the Windows native DLLs.
Preview 2 (January 25, 2026)
Enabled Control Flow Guard and Buffer Security Check across the Windows native binaries.
Preview 1 (October 13, 2025)
Added the missing tvOS SKSurface.Create overloads and improved native symbol packaging for Android.