Accepted fribidi 1.0.8-2+deb11u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 05 Apr 2022 22:03:02 +0200
Source: fribidi
Architecture: source
Version: 1.0.8-2+deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Debian Hebrew Packaging Team <team+hebrew@tracker.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1008793
Changes:
fribidi (1.0.8-2+deb11u1) bullseye; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* CVE-2022-25308
stack-buffer-overflow issue in main()
* CVE-2022-25309
heap-buffer-overflow issue in fribidi_cap_rtl_to_unicode()
* CVE-2022-25310
SEGV issue in fribidi_remove_bidi_marks()
(Closes: #1008793)
Checksums-Sha1:
a1fb967e60210200df5ceab384275d3afea6d018 2481 fribidi_1.0.8-2+deb11u1.dsc
82b16ed5227f88cc1d0d21bfb2c70252ac1a4c69 10360 fribidi_1.0.8-2+deb11u1.debian.tar.xz
b50d86f01480062fca360ab71efdadfc7122658e 7658 fribidi_1.0.8-2+deb11u1_amd64.buildinfo
Checksums-Sha256:
21c35e9e2e1a9665e0d1fb8f449299085fb471bb8f4ecfd1a1afc388eb1dd2ac 2481 fribidi_1.0.8-2+deb11u1.dsc
62dc4a73351c71ac903f9428a5ebf5e32c0ff49a1a6a08dc95d9ce03e3f48a21 10360 fribidi_1.0.8-2+deb11u1.debian.tar.xz
24c8d0d7a1357077c655e89ad60d861c0abca41ac90619689528447294c14246 7658 fribidi_1.0.8-2+deb11u1_amd64.buildinfo
Files:
a5cb97c44517ef5cd6c772a367e49bad 2481 libs optional fribidi_1.0.8-2+deb11u1.dsc
33f0fd1a7b36537b9301c62848a04ede 10360 libs optional fribidi_1.0.8-2+deb11u1.debian.tar.xz
057cad8427a0e2b49090e09c6cdba7ea 7658 libs optional fribidi_1.0.8-2+deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=oM4I
-----END PGP SIGNATURE-----
Reply to: