Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 754
Alerts This Week
Warning Icon 1 754

Ubuntu 19.10 USN-4179-1: Urgent Crash Risk Due to FriBidi Vulnerability

ubuntu
Calendar Grey November 8, 2019
Dist Ubuntu Esm H88
To mitigate the FriBidi vulnerability on Ubuntu, follow these steps to update and secure your applications effectively without delay
Applications using FriBidi could be made to crash or run programs as your login if it displayed specially crafted text.

Summary

Applications using FriBidi could be made to crash or run programs as your

login if it displayed specially crafted text.

Software Description:

- fribidi: Free Implementation of the Unicode BiDi algorithm (utility)

Details:

Alex Murray discovered a stack-based buffer overflow when handling a large

number of unicode isolate directives. An attacker could use this to cause a

denial of service or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory Ubuntu arbitrary code Denial of Service stack overflow crash FriBidi

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  libfribidi0                     1.0.5-3.1ubuntu0.19.10.1

Ubuntu 19.04:
  libfribidi0                     1.0.5-3.1ubuntu0.19.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4179-1

CVE-2019-18397

Severity
important
Lowest
Low
Medium
High
Critical

November 07, 2019

Topics%20covered

Topics Covered

security advisory Ubuntu arbitrary code Denial of Service stack overflow crash FriBidi

Package Information

https://launchpad.net/ubuntu/+source/fribidi/1.0.5-3.1ubuntu0.19.10.1
https://launchpad.net/ubuntu/+source/fribidi/1.0.5-3.1ubuntu0.19.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.