REDHAT-BUG-565997: Buffer Overflow
It was reported [1] that pyfribidi contains a buffer overflow in the log2visutf8() function due to the assumption that the string returned by fribidiunicodetoutf8() will be the same length as the original UTF-8 string. Due to changes in fribidi 0.19.1, for the Arabic language this is not the case as the joining added in fribidi causes some of the original 2-byte UTF-8 sequences to be come 3-bytes long.
The upstream report also includes a patch that is supposed to correct the issue by increasing the size of the buffer passed to fribidiunicodetoutf8().
Due to Fedora 11 and 12 containing fribidi 0.19.2, this would affect Fedora.
[1] http://sourceforge.net/tracker/?func=detail&aid=2676136&groupid=158366&atid=807545
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-565997?
The severity of REDHAT-BUG-565997 is classified as critical due to the buffer overflow vulnerability.
How do I fix REDHAT-BUG-565997?
To fix REDHAT-BUG-565997, update the fribidi package to the latest version available from your distribution repository.
What software is affected by REDHAT-BUG-565997?
REDHAT-BUG-565997 affects the fribidi package in Fedora.
What does the buffer overflow in REDHAT-BUG-565997 affect?
The buffer overflow in REDHAT-BUG-565997 affects the log2vis_utf8() function specifically for Arabic language processing.
Is there a workaround for REDHAT-BUG-565997?
Currently, the recommended approach for REDHAT-BUG-565997 is to apply the patch or update the software, as no official workaround has been provided.