-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 Apr 2022 11:03:02 +0200 Source: fribidi Binary: libfribidi0 libfribidi-dev libfribidi0-udeb libfribidi-bin Architecture: source amd64 Version: 0.19.7-1+deb9u2 Distribution: stretch-security Urgency: medium Maintainer: Debian Hebrew Packaging Team <debian-hebrew-package@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: libfribidi-bin - Free Implementation of the Unicode BiDi algorithm (utility) libfribidi-dev - Development files for FreeBidi library libfribidi0 - Free Implementation of the Unicode BiDi algorithm libfribidi0-udeb - Free Implementation of the Unicode BiDi algorithm (udeb) Changes: fribidi (0.19.7-1+deb9u2) stretch-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2022-25308 stack-buffer-overflow issue in main() * CVE-2022-25309 heap-buffer-overflow issue in fribidi_cap_rtl_to_unicode() * CVE-2022-25310 SEGV issue in fribidi_remove_bidi_marks() Checksums-Sha1: c4e6ece0a75f3998b518d4ec25869f3b654ac3e3 2440 fribidi_0.19.7-1+deb9u2.dsc e470e078eafe6c065708def3e037c129c0d7367d 648299 fribidi_0.19.7.orig.tar.bz2 d972a372d0b38d30468d3bb3d768cb56476119d5 8816 fribidi_0.19.7-1+deb9u2.debian.tar.xz cdb47805c8c332e199db9c4cfbc80fd0c6f986ef 7534 fribidi_0.19.7-1+deb9u2_amd64.buildinfo 55bc104f6e625ae794414d2b2109516ae30b1aee 2784 libfribidi-bin-dbgsym_0.19.7-1+deb9u2_amd64.deb 0dd23d1379302178cb4054ab4a1b0f24c8b899bf 31062 libfribidi-bin_0.19.7-1+deb9u2_amd64.deb f3b97722885716f1fb46c5991927ed92ceb22330 64654 libfribidi-dev_0.19.7-1+deb9u2_amd64.deb 4d31842e70eed6953e8a80020021e643b45945f0 3504 libfribidi0-dbgsym_0.19.7-1+deb9u2_amd64.deb 0b6de5fbe2f0631beffc8f08f1449fb01611bee7 16614 libfribidi0-udeb_0.19.7-1+deb9u2_amd64.udeb e38b0f4d107a099effcdb3b329975c6d44c3d060 45714 libfribidi0_0.19.7-1+deb9u2_amd64.deb Checksums-Sha256: 1b023c748efae81748f33a3737dbd9006082dbcae2339adacd3b8f825624b70f 2440 fribidi_0.19.7-1+deb9u2.dsc 08222a6212bbc2276a2d55c3bf370109ae4a35b689acbc66571ad2a670595a8e 648299 fribidi_0.19.7.orig.tar.bz2 1cd63a9f611f7ca28749cdf71597e50edf1b7ce3517538934f6687acd89d694c 8816 fribidi_0.19.7-1+deb9u2.debian.tar.xz 126e416f3542b5a50a3eedbaa2c7a2745b4c75a1e63d13f4ffc4dc180a411e52 7534 fribidi_0.19.7-1+deb9u2_amd64.buildinfo 2748c80635a422656c5c1316a461a9b2a5e118f20f1be0251d123e2bfb2c1068 2784 libfribidi-bin-dbgsym_0.19.7-1+deb9u2_amd64.deb 311618fac335c7667e1a9059c4447eb5aab5c85ece432c1da4b871f3f2e0f299 31062 libfribidi-bin_0.19.7-1+deb9u2_amd64.deb b72068fe3fdedbaad0ecb7be9b98a804945bc1c206161ecf1422194c882a6d2b 64654 libfribidi-dev_0.19.7-1+deb9u2_amd64.deb 04f69fb3dde39e93357e15f9109cc0351b95e6b8ea3aa4b5586822edfa035b66 3504 libfribidi0-dbgsym_0.19.7-1+deb9u2_amd64.deb 74dbe889e89c118521b3c93d86f21992dc34e962989ab409270da3bf9e1f5878 16614 libfribidi0-udeb_0.19.7-1+deb9u2_amd64.udeb fc13caab4dc26eade89db042f7d2d31527a970d86bc6222d2a71a844e194c66e 45714 libfribidi0_0.19.7-1+deb9u2_amd64.deb Files: 0cf69587c7235f00304332d62868475c 2440 libs optional fribidi_0.19.7-1+deb9u2.dsc 6c7e7cfdd39c908f7ac619351c1c5c23 648299 libs optional fribidi_0.19.7.orig.tar.bz2 cf548b215011254318cec8983a50c2f6 8816 libs optional fribidi_0.19.7-1+deb9u2.debian.tar.xz 158be2c549c82fbee886c60d8de61e5d 7534 libs optional fribidi_0.19.7-1+deb9u2_amd64.buildinfo a0c75c4dc1e15713ed6e2a8e35568fcc 2784 debug extra libfribidi-bin-dbgsym_0.19.7-1+deb9u2_amd64.deb 917ed396b7db5dc5c4cc2950c3c66c05 31062 utils optional libfribidi-bin_0.19.7-1+deb9u2_amd64.deb 4908b8296017caa08ca3135abd5c853a 64654 libdevel optional libfribidi-dev_0.19.7-1+deb9u2_amd64.deb 7ab8459cf69c361296c3e71baca5787b 3504 debug extra libfribidi0-dbgsym_0.19.7-1+deb9u2_amd64.deb 0d370f844961edaedb41619dc04f8a5e 16614 debian-installer extra libfribidi0-udeb_0.19.7-1+deb9u2_amd64.udeb d10e75eef59ff65ccbc384e65132375f 45714 libs optional libfribidi0_0.19.7-1+deb9u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmJSqrFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRz8zD/wK+DiyzVN6I5QNN4dnfW3RJe+ir9y7 lVVtRAbyTY53PAJUFA/dU9KyCLwxHLRWK9vTo+QgDBjxxaQNoU3SX13GhiNGE+m/ 8sbTAsQXDWn93vVrWd7phHlt8DaIgMCERYqzUQIad1FfTxprvUkKO1JBG+MBZURv w3UKMXN0EUWWOE9/dNVP4S9Ufjo6QK5Idy/hfWPrRj3xJjNJEgQfDchIrQJNaIIv K4toa4g+T3jZMwcfSlRTHOWHWyELl9io1UaQiRObX4tSyMQrRovNZN/RxEIofm6d CLcifBtB8dFKx9Sluw4JwGlby6kz4tBwsELiDzouMHbYZ5UbLqiZUlpwcdiqxV/7 CPu7V3nmXSTxmzzxDNBi015RpPlsgHypQG9H8PWif+MnEz04QzGR7wo6BNxsp+Bb CrV9GGnfmVGk56xZLBCT2DvmHV2Mww//Cywb6og8nC9ZuQ3SK7M+eGU4hwOA9aIk 5mE8jsKhz+xQQveahYPA7JJjoHDdHjkBKw84Gef4Qi7CtxpmYyfNpbF3PLuq2b4/ Jaieek/RWJ2nIK/B7vtp53pTdzYnuKXJuo+3HD0wUq2O0j7Wl0r0LDf4OYHImtei DSk8G+HwadT53UF5DwMBW5AKbRyE425YEAtGq8SdxYLwWdCHPvNdwc31aUfGooxd TOhFM58AI9eSFg== =VkFn -----END PGP SIGNATURE-----
