libmobi (0.11+dfsg-1) unstable; urgency=medium * New upstream release. * fixed multiple buffer over-reads and null pointer dereferences that can be triggered with crafted input. The security impact of these bugs is low, they can cause crashes. These bugs were identified by extensive fuzzing by various researchers: jimoyong, dupingxin (NSFOCUS Tianji Lab), jieyongma (TDHX ICS Security), cnitlrt, beidasoft-cobot-oss-fuzz, han0nly. Some of these vulnerabilities has been assigned CVEs: CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908. * fixed potential leak in dictionary parsing on corrupt data * improved portability of encryption key generation * updated Xcode and MSVC projects -- Bartek Fabiszewski Sat, 28 May 2022 15:38:22 +0000 libmobi (0.10+dfsg1-1) unstable; urgency=medium * New upstream release. -- Bartek Fabiszewski Tue, 22 Mar 2022 14:34:44 +0100 libmobi (0.9+dfsg1-1) unstable; urgency=medium * Initial release. (Closes: #966677) -- Bartek Fabiszewski Mon, 25 Oct 2021 11:47:50 +0200