SLES 15 — libass9 — multiple vulnerabilities (6 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 30 June 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:1174-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36430 CVE-2020-26682 CVE-2020-24994 CVE-2016-7969 CVE-2016-7970 CVE-2016-7972 Upstream summary: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because […]