Lucene search

K
osvGoogleOSV:DLA-668-1
HistoryOct 19, 2016 - 12:00 a.m.

libass - security update

2016-10-1900:00:00
Google
osv.dev
8

0.02 Low

EPSS

Percentile

89.0%

Several vulnerabilities were discovered in libass, a library for
manipulating the SubStation Alpha (SSA) subtitle file format. The Common
Vulnerabilities and Exposures project identifies the following issues.

  • CVE-2016-7969
    Mode 0/3 line wrapping equalization in specific cases which could
    result in illegal reads while laying out and shaping text.
  • CVE-2016-7972
    Memory reallocation issue in the shaper which lead to undefined
    behavior

For Debian 7 Wheezy, these problems have been fixed in version
0.10.0-3+deb7u1.

We recommend that you upgrade your libass packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: <https://wiki.debian.org/LTS&gt;

CPENameOperatorVersion
libasseq0.10.0-3