[SECURITY] Fedora 23 Update: libass-0.13.4-1.fc23

Libass is a portable library for SSA/ASS subtitles rendering...

[SECURITY] Fedora 25 Update: libass-0.13.4-1.fc25

Libass is a portable library for SSA/ASS subtitles rendering...

Fedora 24 : libass (2016-282507c3e9)

The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-282507c3e9 advisory. Fixes CVE-2016-7969, CVE-2016-7970 and CVE-2016-7972 ---- Update to 0.13.3. Contains various bugfixes. Tenable has extracted the preceding descripti...

[SECURITY] Fedora 24 Update: libass-0.13.4-1.fc24

Libass is a portable library for SSA/ASS subtitles rendering...

Libass Security Bypass Vulnerability

libass is a lightweight library of functions for rendering subtitles in ASS/SSA format. A security bypass vulnerability exists in Libass, which can be exploited by remote attackers to perform unauthenticated operations bypassing security mechanisms...

Libass Memory Overflow Vulnerability

libass is a lightweight library of functions for rendering subtitles in ASS/SSA format. A memory overflow vulnerability exists in Libass, which can be exploited by remote attackers to execute arbitrary code...

Libass Arbitrary Code Execution Vulnerability

libass is a lightweight library of functions for rendering subtitles in ASS/SSA format. An arbitrary code execution vulnerability exists in Libass, which can be exploited by a remote attacker to execute arbitrary code...

libass denial of service vulnerability

libass is a lightweight library of functions for rendering subtitles in ASS/SSA format. A denial of service vulnerability exists in Libass, which can be exploited by remote attackers to cause a denial of service...

Debian DLA-668-1 : libass security update

Several vulnerabilities were discovered in libass, a library for manipulating the SubStation Alpha SSA subtitle file format. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2016-7969 Mode 0/3 line wrapping equalization in specific cases which could result in...

[SECURITY] [DLA 668-1] libass security update

Package : libass Version : 0.10.0-3+deb7u1 CVE ID : CVE-2016-7969 CVE-2016-7972 Several vulnerabilities were discovered in libass, a library for manipulating the SubStation Alpha SSA subtitle file format. The Common Vulnerabilities and Exposures project identifies the following issues...

DLA-668-1 libass - security update

Bulletin has no description...

Global-buffer-overflow in ass_strtod

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5993566283235328 Fuzzer: libFuzzerlibassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000000843720 Crash State:...

MGASA-2016-0341 Updated libass packages fixes security vulnerabilities

Amount of memory allocated during memory reallocation in the shaper wasn't tracked, possibly resulting in undefined behavior CVE-2016-7972. Illegal read in Gaussian blur coefficient calculations CVE-2016-7970. Mode 0/3 line wrapping equalization in specific cases could result in illegal reads whi...

Updated libass packages fixes security vulnerabilities

Amount of memory allocated during memory reallocation in the shaper wasn't tracked, possibly resulting in undefined behavior CVE-2016-7972. Illegal read in Gaussian blur coefficient calculations CVE-2016-7970. Mode 0/3 line wrapping equalization in specific cases could result in illegal reads whi...