#1009250 bullseye-pu: fribidi/1.0.8-2+deb11u1

Package:
release.debian.org
Source:
release.debian.org
Submitter:
Thorsten Alteholz
Date:
2022-07-09 10:51:53 UTC
Severity:
normal
Tags:
#1009250#5
Date:
2022-04-09 23:04:37 UTC
From:
To:
The attached debdiff for fribidi fixes CVE-2022-25308, CVE-2022-25309 and
CVE-2022-25310 in Bullseye. These CVEs have been marked as no-dsa by the
security team.

The same fixes have been already uploaded to Unstable.

   Thorsten
#1009250#10
Date:
2022-05-28 20:03:28 UTC
From:
To:
Control: tags -1 + confirmed d-i

This looks OK to me, thanks, but will need a KiBi-ack as fribidi
produces a udeb; CCing and tagging accordingly.

Regards,

Adam
#1009250#17
Date:
2022-05-30 21:33:36 UTC
From:
To:
... and uploaded.

   Thorsten
#1009250#22
Date:
2022-07-01 15:23:09 UTC
From:
To:
package release.debian.org
tags 1009250 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: fribidi
Version: 1.0.8-2+deb11u1

Explanation: fix buffer overflow issues [CVE-2022-25308 CVE-2022-25309]; fix crash [CVE-2022-25310]
#1009250#27
Date:
2022-07-01 15:23:09 UTC
From:
To:
package release.debian.org
tags 1009250 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: fribidi
Version: 1.0.8-2+deb11u1

Explanation: fix buffer overflow issues [CVE-2022-25308 CVE-2022-25309]; fix crash [CVE-2022-25310]
#1009250#32
Date:
2022-07-09 10:47:43 UTC
From:
To:
(re-sending with fixed bug numbers)

Hi,

The updates discussed in these bugs were included in today's bullseye
point release.

Regards,

Adam