Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-3253

Высокий

ALT-PU-2020-3253: package libass update to version 0.15.0-alt1

Источник
errata.altlinux.org
Дата публикации
10.11.2020
Дата обновления
04.02.2026
Устраненные уязвимости
4

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades libass to version 0.15.0-alt1.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 6 лет назад

In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.

CVSS3: 8.8
nvd
около 6 лет назад

In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.

CVSS3: 8.8
debian
около 6 лет назад

In libass 0.14.0, the `ass_outline_construct`'s call to `outline_strok ...

CVSS3: 8.8
ubuntu
больше 5 лет назад

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

CVSS3: 8.8
nvd
больше 5 лет назад

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.