fribidi 1.0.8-2ubuntu3.1 source package in Ubuntu
Changelog
fribidi (1.0.8-2ubuntu3.1) jammy-security; urgency=medium * SECURITY UPDATE: Incorrect length checking in processing of line input could result in a stack buffer overflow, resulting in a crash or potential code execution. - debian/patches/CVE-2022-25308.patch: add checking to length of string buffer before processing in bin/fribidi-main.c - CVE-2022-25308 * SECURITY UPDATE: Insufficient sanitization of input data to the CapRTL encoder could result in a heap buffer overflow, resulting in a crash or potential code execution. - debian/patches/CVE-2022-25309.patch: add checking and removal of dangerous characters before encoding stage, in lib/fribidi-char-sets-cap-rtl.c - CVE-2022-25309 * SECURITY UPDATE: Incorrect handling of string pointer can result in a crash in fribidi_remove_bidi_marks(). - debian/patches/CVE-2022-25310.patch: add checking for NULL strings, to avoid potential use-after-free in lib/fribidi.c - CVE-2022-25310 -- Ray Veldkamp <email address hidden> Tue, 26 Apr 2022 16:01:05 +1000
Upload details
- Uploaded by:
- Ray Veldkamp
- Uploaded to:
- Jammy
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- libs
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section | |
---|---|---|---|---|
Jammy | updates | main | libs | |
Jammy | security | main | libs |
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
fribidi_1.0.8.orig.tar.bz2 | 2.0 MiB | 94c7b68d86ad2a9613b4dcffe7bbeb03523d63b5b37918bdf2e4ef34195c1e6c |
fribidi_1.0.8-2ubuntu3.1.debian.tar.xz | 10.6 KiB | c4a0185e8b55a2520eb98575acdfbb7d42b36a1ad2b22f1c2f308a20ee3466f9 |
fribidi_1.0.8-2ubuntu3.1.dsc | 2.4 KiB | 585c32773194a19ab4e64e37e86c2d9627ba1235c496fe07544f8b8f80233160 |
Available diffs
Binary packages built by this source
- libfribidi-bin: No summary available for libfribidi-bin in ubuntu kinetic.
No description available for libfribidi-bin in ubuntu kinetic.
- libfribidi-bin-dbgsym: No summary available for libfribidi-bin-dbgsym in ubuntu kinetic.
No description available for libfribidi-
bin-dbgsym in ubuntu kinetic.
- libfribidi-dev: Development files for FreeBidi library
FriBiDi is a BiDi algorithm implementation for Hebrew and/or Arabic
languages.
This package contains the header files and static libraries for the
FriBidi C library.
- libfribidi0: No summary available for libfribidi0 in ubuntu kinetic.
No description available for libfribidi0 in ubuntu kinetic.
- libfribidi0-dbgsym: debug symbols for libfribidi0