Publishing details

• Published on 2022-04-27
• Copied from ubuntu jammy in PPA for Ubuntu Security Proposed by Ray Veldkamp

Changelog

fribidi (1.0.8-2ubuntu3.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Incorrect length checking in processing of line input
    could result in a stack buffer overflow, resulting in a crash or potential
    code execution.
    - debian/patches/CVE-2022-25308.patch: add checking to length of string
      buffer before processing in bin/fribidi-main.c
    - CVE-2022-25308

  * SECURITY UPDATE: Insufficient sanitization of input data to the CapRTL
    encoder could result in a heap buffer overflow, resulting in a crash or
    potential code execution.
    - debian/patches/CVE-2022-25309.patch: add checking and removal of
      dangerous characters before encoding stage, in
      lib/fribidi-char-sets-cap-rtl.c
    - CVE-2022-25309

  * SECURITY UPDATE: Incorrect handling of string pointer can result in a
    crash in fribidi_remove_bidi_marks().
    - debian/patches/CVE-2022-25310.patch: add checking for NULL strings,
      to avoid potential use-after-free in lib/fribidi.c
    - CVE-2022-25310

 -- Ray Veldkamp <email address hidden>  Tue, 26 Apr 2022 16:01:05 +1000

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• riscv64
• s390x

Built packages

• libfribidi-bin Free Implementation of the Unicode BiDi algorithm (utility)

• libfribidi-bin-dbgsym debug symbols for libfribidi-bin

• libfribidi-dev Development files for FreeBidi library

• libfribidi0 Free Implementation of the Unicode BiDi algorithm

• libfribidi0-dbgsym debug symbols for libfribidi0

Package files

• fribidi_1.0.8-2ubuntu3.1.debian.tar.xz (10.6 KiB)
• fribidi_1.0.8-2ubuntu3.1.dsc (2.4 KiB)
• fribidi_1.0.8.orig.tar.bz2 (2.0 MiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu3.1_amd64.ddeb (2.8 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu3.1_arm64.ddeb (2.9 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu3.1_armhf.ddeb (3.0 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu3.1_i386.ddeb (2.7 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu3.1_ppc64el.ddeb (3.3 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu3.1_riscv64.ddeb (2.9 KiB)
• libfribidi-bin-dbgsym_1.0.8-2ubuntu3.1_s390x.ddeb (2.7 KiB)
• libfribidi-bin_1.0.8-2ubuntu3.1_amd64.deb (9.3 KiB)
• libfribidi-bin_1.0.8-2ubuntu3.1_arm64.deb (9.2 KiB)
• libfribidi-bin_1.0.8-2ubuntu3.1_armhf.deb (8.8 KiB)
• libfribidi-bin_1.0.8-2ubuntu3.1_i386.deb (9.1 KiB)
• libfribidi-bin_1.0.8-2ubuntu3.1_ppc64el.deb (9.5 KiB)
• libfribidi-bin_1.0.8-2ubuntu3.1_riscv64.deb (8.9 KiB)
• libfribidi-bin_1.0.8-2ubuntu3.1_s390x.deb (9.4 KiB)
• libfribidi-dev_1.0.8-2ubuntu3.1_amd64.deb (63.3 KiB)
• libfribidi-dev_1.0.8-2ubuntu3.1_arm64.deb (63.4 KiB)
• libfribidi-dev_1.0.8-2ubuntu3.1_armhf.deb (61.2 KiB)
• libfribidi-dev_1.0.8-2ubuntu3.1_i386.deb (65.1 KiB)
• libfribidi-dev_1.0.8-2ubuntu3.1_ppc64el.deb (65.1 KiB)
• libfribidi-dev_1.0.8-2ubuntu3.1_riscv64.deb (70.3 KiB)
• libfribidi-dev_1.0.8-2ubuntu3.1_s390x.deb (64.6 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu3.1_amd64.ddeb (3.5 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu3.1_arm64.ddeb (3.8 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu3.1_armhf.ddeb (4.0 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu3.1_i386.ddeb (3.9 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu3.1_ppc64el.ddeb (4.1 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu3.1_riscv64.ddeb (3.6 KiB)
• libfribidi0-dbgsym_1.0.8-2ubuntu3.1_s390x.ddeb (3.6 KiB)
• libfribidi0_1.0.8-2ubuntu3.1_amd64.deb (25.5 KiB)
• libfribidi0_1.0.8-2ubuntu3.1_arm64.deb (25.8 KiB)
• libfribidi0_1.0.8-2ubuntu3.1_armhf.deb (23.3 KiB)
• libfribidi0_1.0.8-2ubuntu3.1_i386.deb (26.0 KiB)
• libfribidi0_1.0.8-2ubuntu3.1_ppc64el.deb (27.1 KiB)
• libfribidi0_1.0.8-2ubuntu3.1_riscv64.deb (25.2 KiB)
• libfribidi0_1.0.8-2ubuntu3.1_s390x.deb (26.6 KiB)