Publishing details

• Removed from disk on 2022-07-24.
• Removal requested on 2022-07-23.
• Published on 2022-04-06
• Copied from ubuntu impish in PPA for Ubuntu Security Proposed by Ray Veldkamp

Changelog

fribidi (1.0.8-2ubuntu2.1) impish-security; urgency=medium

  * SECURITY UPDATE: Incorrect length checking in processing of line input
    could result in a stack buffer overflow, resulting in a crash or potential
    code execution.
    - debian/patches/CVE-2022-25308.patch: add checking to length of string
      buffer before processing in bin/fribidi-main.c
    - CVE-2022-25308

  * SECURITY UPDATE: Insufficient sanitization of input data to the CapRTL
    encoder could result in a heap buffer overflow, resulting in a crash or
    potential code execution.
    - debian/patches/CVE-2022-25309.patch: add checking and removal of
      dangerous characters before encoding stage, in
      lib/fribidi-char-sets-cap-rtl.c
    - CVE-2022-25309

  * SECURITY UPDATE: Incorrect handling of string pointer can result in a
    crash in fribidi_remove_bidi_marks().
    - debian/patches/CVE-2022-25310.patch: add checking for NULL strings, to avoid
      potential use-after-free in lib/fribidi.c
    - CVE-2022-25310

 -- Ray Veldkamp <email address hidden>  Wed, 06 Apr 2022 15:07:20 +1000

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• riscv64
• s390x

Package files

• fribidi_1.0.8-2ubuntu2.1.debian.tar.xz (10.6 KiB)
• fribidi_1.0.8-2ubuntu2.1.dsc (2.4 KiB)
• fribidi_1.0.8.orig.tar.bz2 (2.0 MiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu2.1_amd64.ddeb (2.8 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu2.1_arm64.ddeb (2.9 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu2.1_armhf.ddeb (3.0 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu2.1_i386.ddeb (2.8 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu2.1_ppc64el.ddeb (3.3 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu2.1_riscv64.ddeb (2.8 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu2.1_s390x.ddeb (2.7 KiB)
• libfribidi-bin_1.0.8-2ubuntu2.1_amd64.deb (9.3 KiB)
• libfribidi-bin_1.0.8-2ubuntu2.1_arm64.deb (9.1 KiB)
• libfribidi-bin_1.0.8-2ubuntu2.1_armhf.deb (8.8 KiB)
• libfribidi-bin_1.0.8-2ubuntu2.1_i386.deb (9.1 KiB)
• libfribidi-bin_1.0.8-2ubuntu2.1_ppc64el.deb (9.4 KiB)
• libfribidi-bin_1.0.8-2ubuntu2.1_riscv64.deb (8.8 KiB)
• libfribidi-bin_1.0.8-2ubuntu2.1_s390x.deb (9.4 KiB)
• libfribidi-dev_1.0.8-2ubuntu2.1_amd64.deb (63.3 KiB)
• libfribidi-dev_1.0.8-2ubuntu2.1_arm64.deb (63.5 KiB)
• libfribidi-dev_1.0.8-2ubuntu2.1_armhf.deb (61.2 KiB)
• libfribidi-dev_1.0.8-2ubuntu2.1_i386.deb (65.1 KiB)
• libfribidi-dev_1.0.8-2ubuntu2.1_ppc64el.deb (65.0 KiB)
• libfribidi-dev_1.0.8-2ubuntu2.1_riscv64.deb (70.0 KiB)
• libfribidi-dev_1.0.8-2ubuntu2.1_s390x.deb (64.6 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu2.1_amd64.ddeb (3.5 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu2.1_arm64.ddeb (3.8 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu2.1_armhf.ddeb (4.0 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu2.1_i386.ddeb (3.9 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu2.1_ppc64el.ddeb (4.0 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu2.1_riscv64.ddeb (3.5 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu2.1_s390x.ddeb (3.6 KiB)
• libfribidi0_1.0.8-2ubuntu2.1_amd64.deb (25.4 KiB)
• libfribidi0_1.0.8-2ubuntu2.1_arm64.deb (25.7 KiB)
• libfribidi0_1.0.8-2ubuntu2.1_armhf.deb (23.2 KiB)
• libfribidi0_1.0.8-2ubuntu2.1_i386.deb (26.0 KiB)
• libfribidi0_1.0.8-2ubuntu2.1_ppc64el.deb (26.8 KiB)
• libfribidi0_1.0.8-2ubuntu2.1_riscv64.deb (25.1 KiB)
• libfribidi0_1.0.8-2ubuntu2.1_s390x.deb (26.6 KiB)