Advisories » MGASA-2016-0341

Updated libass packages fixes security vulnerabilities

Publication date: 12 Oct 2016
Modification date: 13 Oct 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-7972 , CVE-2016-7970 , CVE-2016-7969

Description

Amount of memory allocated during memory reallocation in the shaper wasn't
tracked, possibly resulting in undefined behavior (CVE-2016-7972).

Illegal read in Gaussian blur coefficient calculations (CVE-2016-7970).

Mode 0/3 line wrapping equalization in specific cases could result in illegal
reads while laying out and shaping text. (CVE-2016-7969)

The libass package has been updated to version 0.13.4, fixing this issue and
several other bugs.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19537
• https://github.com/libass/libass/releases
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7972
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7970
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7969

SRPMS

5/core

• libass-0.13.4-1.mga5