A vulnerability in libass could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libass | * | < 0.15.1 | >= 0.15.1 |
libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format.
A one-byte buffer overwrite in ASS font decoding could trigger an assertion failure resulting in denial of service.
An attacker with control over the ASS track input to libass via an application using it could trigger a denial of service.
There is no known workaround at this time.
All libass users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libass-0.15.1"
A vulnerability has been found in libass that could allow a remote attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libass | * | < 0.15.0 | >= 0.15.0 |
libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format.
It was discovered that libass did not properly handle Advanced Substation Alpha/Substation Alpha subtitle format files.
A remote attacker could entice a user to process an a specially crafted subtitle format file using an application linked against libass, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All libass users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libass-0.15.0"
Multiple vulnerabilities have been found in libass, the worst of which have unknown impacts.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libass | * | < 0.13.4 | >= 0.13.4 |
libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format.
Multiple vulnerabilities have been discovered in libass. Please review the CVE identifiers referenced below for details.
A remote attacker could cause a Denial of Service condition or other unknown impacts via unknown attack vectors.
There is no known workaround at this time.
All libass users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libass-0.13.4"