libass: CVE-2020-26682: Signed integer overflow

Debian Bug report logs - #975108
libass: CVE-2020-26682: Signed integer overflow

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Ian <nobrowser@gmail.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: libass9: Signed integer overflow (undefined behavior)

Date: Wed, 18 Nov 2020 21:44:34 -0800

Package: libass9
Version: 1:0.14.0-2
Severity: normal

Dear Maintainer,

please see upstream issue:

https://github.com/libass/libass/issues/431

This is fixed in version 0.15.* (and thus in Debian testing and unstable)
but I feel it still bears reporting because of possible security implications.

-- System Information:
Debian Release: 10.6
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-12-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages libass9 depends on:
ii  libc6           2.28-10
ii  libfontconfig1  2.13.1-2
ii  libfreetype6    2.9.1-3+deb10u2
ii  libfribidi0     1.0.5-3.1+deb10u1
ii  libharfbuzz0b   2.3.1-1

libass9 recommends no packages.

libass9 suggests no packages.

-- no debconf information

Message #18 received at 975108-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: control@bugs.debian.org

Cc: 975108-submitter@bugs.debian.org, team@security.debian.org

Subject: closing 975108, tagging 975108 ...

Date: Thu, 19 Nov 2020 07:10:51 +0100

close 975108 1:0.15.0-1
tags 975108 + upstream fixed-upstream security
forwarded 975108 https://github.com/libass/libass/issues/431
thanks

Send a report that this bug log contains spam.