Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8: 2021-0413 Moderate: Libass Heap-Based Overflow Fix

mageia
Calendar Grey August 27, 2021
Dist Mageia Esm H88
The latest libass updates address a critical memory overflow vulnerability in Mageia distributions, bolstering user safety. Discover further details here.
Updated libass packages fix security vulnerability: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because...

Summary

Updated libass packages fix security vulnerability:
libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars(called from decode_font and process_text) because the wrong integer data type is used for subtraction (CVE-2020-36430).

References

- https://bugs.mageia.org/show_bug.cgi?id=29392

- https://lists.suse.com/pipermail/sle-security-updates/2021-August/009325.html

- https://www.cve.org/CVERecord?id=CVE-2020-36430

Topics%20covered

Topics Covered

security advisory moderate update buffer overflow heap overflow libass Mageia

Resolution

SRPMS

- 8/core/libass-0.15.1-1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 27 Aug 2021
URL: https://advisories.mageia.org/MGASA-2021-0413.html
Type: security
CVE: CVE-2020-36430

Topics%20covered

Topics Covered

security advisory moderate update buffer overflow heap overflow libass Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here