MGASA-2021-0017 - Updated libass packages fix security vulnerability Publication date: 10 Jan 2021 URL: https://advisories.mageia.org/MGASA-2021-0017.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-26682 In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow. (CVE-2020-26682) References: - https://bugs.mageia.org/show_bug.cgi?id=27385 - https://www.openwall.com/lists/oss-security/2020/09/29/2 - https://www.openwall.com/lists/oss-security/2020/11/19/7 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26682 SRPMS: - 7/core/libass-0.15.0-1.mga7
Mageia 2021-0017: libass security update
In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow
Summary
CVE: CVE-2020-26682
In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke`
causes a signed integer overflow. (CVE-2020-26682)
Resolution
MGASA-2021-0017 - Updated libass packages fix security vulnerability
References
- https://bugs.mageia.org/show_bug.cgi?id=27385
- https://www.openwall.com/lists/oss-security/2020/09/29/2
- https://www.openwall.com/lists/oss-security/2020/11/19/7
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26682
Severity
Issued Date: 10 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0017.html
Type: security
Affected Mageia releases: 7
News
HOWTOs
Features
Secure Linux Hosting for Businesses
What Is Threat Intelligence?
CloudLinux Simplifies & Enhances Linux Security with its TuxCare Unified Enterprise Support Services
LinuxSecurity, Leading Provider of Linux Security News and Information, Unveils its New Website
Biden's New Executive Cybersecurity Order Highlights the Power of Open-Source Security
About Us
Powered By
