Ubuntu
fribidi package

fribidi 1.0.8-2ubuntu0.1 source package in Ubuntu

Changelog

fribidi (1.0.8-2ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Incorrect length checking in processing of line input
    could result in a stack buffer overflow, resulting in a crash or potential
    code execution.
    - debian/patches/CVE-2022-25308.patch: add checking to length of string
      buffer before processing in bin/fribidi-main.c
    - CVE-2022-25308

  * SECURITY UPDATE: Insufficient sanitization of input data to the CapRTL
    encoder could result in a heap buffer overflow, resulting in a crash or
    potential code execution.
    - debian/patches/CVE-2022-25309.patch: add checking and removal of
      dangerous characters before encoding stage, in
      lib/fribidi-char-sets-cap-rtl.c
    - CVE-2022-25309

  * SECURITY UPDATE: Incorrect handling of string pointer can result in a
    crash in fribidi_remove_bidi_marks().
    - debian/patches/CVE-2022-25310.patch: add checking for NULL strings, to avoid
      potential use-after-free in lib/fribidi.c
    - CVE-2022-25310

 -- Ray Veldkamp <email address hidden>  Wed, 06 Apr 2022 15:13:58 +1000

Upload details

Uploaded by:
Ray Veldkamp
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main libs
Focal security main libs

Downloads

File Size SHA-256 Checksum
fribidi_1.0.8.orig.tar.bz2 2.0 MiB 94c7b68d86ad2a9613b4dcffe7bbeb03523d63b5b37918bdf2e4ef34195c1e6c
fribidi_1.0.8-2ubuntu0.1.debian.tar.xz 10.4 KiB 0b656e70095933392b707ba7ce8004e899ada7c05fed7a926fa62d577d389046
fribidi_1.0.8-2ubuntu0.1.dsc 2.4 KiB b91d7b6e890b5112963a4d89c8fb61055568d4c04b14491d5e442eb5847cab7f

View changes file

Binary packages built by this source

libfribidi-bin: Free Implementation of the Unicode BiDi algorithm (utility)

 FriBiDi is a BiDi algorithm implementation for Hebrew and/or Arabic
 languages.
 This package contains a command line interface for the fribidi library.

libfribidi-bin-dbgsym: debug symbols for libfribidi-bin
libfribidi-dev: Development files for FreeBidi library

 FriBiDi is a BiDi algorithm implementation for Hebrew and/or Arabic
 languages.
 This package contains the header files and static libraries for the
 FriBidi C library.

libfribidi0: Free Implementation of the Unicode BiDi algorithm

 FriBiDi is a BiDi algorithm implementation for Hebrew and/or Arabic
 languages.
 This package contains the shared libraries.

libfribidi0-dbgsym: debug symbols for libfribidi0
libfribidi0-udeb: Free Implementation of the Unicode BiDi algorithm

 This Debian Installer component provided Bidirectional support
 for Arabic and/or Hebrew languages.