1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28
|
libmobi (0.11+dfsg-1) unstable; urgency=medium
* New upstream release.
* fixed multiple buffer over-reads and null pointer dereferences that can be
triggered with crafted input. The security impact of these bugs is low,
they can cause crashes. These bugs were identified by extensive fuzzing by
various researchers: jimoyong, dupingxin (NSFOCUS Tianji Lab), jieyongma
(TDHX ICS Security), cnitlrt, beidasoft-cobot-oss-fuzz, han0nly.
Some of these vulnerabilities has been assigned CVEs:
CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908.
* fixed potential leak in dictionary parsing on corrupt data
* improved portability of encryption key generation
* updated Xcode and MSVC projects
-- Bartek Fabiszewski <debian@fabiszewski.net> Sat, 28 May 2022 15:38:22 +0000
libmobi (0.10+dfsg1-1) unstable; urgency=medium
* New upstream release.
-- Bartek Fabiszewski <debian@fabiszewski.net> Tue, 22 Mar 2022 14:34:44 +0100
libmobi (0.9+dfsg1-1) unstable; urgency=medium
* Initial release. (Closes: #966677)
-- Bartek Fabiszewski <debian@fabiszewski.net> Mon, 25 Oct 2021 11:47:50 +0200
|