[Git][security-tracker-team/security-tracker][master] Two CVEs assigned for libass issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7fff0c70 by Salvatore Bonaccorso at 2026-07-14T06:09:30+02:00
Two CVEs assigned for libass issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10078,7 +10078,7 @@ CVE-2026-11597 (The Surbma | Infusionsoft Shortcode plugin for WordPress is vuln
 	NOT-FOR-US: WordPress plugin
 CVE-2026-11364 (The Product Specifications for WooCommerce plugin for WordPress is vul ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2026-XXXX [GHSA-5gf7-wjfm-vmvm: Out-of-bounds bit clears for negative Matroska ReadOrder values]
+CVE-2026-61626 [GHSA-5gf7-wjfm-vmvm: Out-of-bounds bit clears for negative Matroska ReadOrder values]
 	- libass 1:0.17.5-1
 	[trixie] - libass <not-affected> (Vulnerable code not present)
 	[bookworm] - libass <not-affected> (Vulnerable code not present)
@@ -10087,7 +10087,7 @@ CVE-2026-XXXX [GHSA-5gf7-wjfm-vmvm: Out-of-bounds bit clears for negative Matros
 	NOTE: Introduced with: https://github.com/libass/libass/commit/dcc9eb722ebd485d2ed0e21c261b0a1b05497154 (0.17.4)
 	NOTE: Fixed with: https://github.com/libass/libass/commit/23da65a130bb8c5b2cf0c7df0dd7d424607f98f1 (0.17.5)
 	NOTE: https://github.com/libass/libass/issues/937
-CVE-2026-XXXX [GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wrap_lines_measure]
+CVE-2026-61627 [GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wrap_lines_measure]
 	- libass 1:0.17.5-1
 	[trixie] - libass 1:0.17.3-1+deb13u1
 	NOTE: https://github.com/libass/libass/security/advisories/GHSA-pjjp-65r7-ppgm



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7fff0c7067f850aa3b790fc836bc6985d319d13f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7fff0c7067f850aa3b790fc836bc6985d319d13f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260714/cbffb51f/attachment.htm>