Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0773-1

Опубликовано: 23 мая 2021
Источник: suse-cvrf

Описание

Security update for libass

This update for libass fixes the following issues:

  • CVE-2020-24994: Fixed a stack overflow in the parse_tag (bsc#1184153).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
libass-devel-0.14.0-lp152.4.6.1
libass9-0.14.0-lp152.4.6.1
libass9-32bit-0.14.0-lp152.4.6.1

Ссылки

Описание

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Затронутые продукты
openSUSE Leap 15.2:libass-devel-0.14.0-lp152.4.6.1
openSUSE Leap 15.2:libass9-0.14.0-lp152.4.6.1
openSUSE Leap 15.2:libass9-32bit-0.14.0-lp152.4.6.1
Ссылки