CVE-2026-61627: Debian/libass vulnerability
GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wraplinesmeasure
Affected Software
1 affected componentFixes available
debian/libass<=1:0.17.1-1
1:0.17.1-1+deb12u11:0.17.3-1+deb13u11:0.17.5-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libassto a version that resolves this vulnerability.Fixed in 1:0.17.1-1+deb12u1Fixed in 1:0.17.3-1+deb13u1Fixed in 1:0.17.5-1
Event History
Sep 24, 2026
CVE Published
via Debian·07:11 PM
Data Sourced
via Debian·07:11 PM
DescriptionAffected Software
Sep 25, 2026
Data Sourced
via Ubuntu·07:11 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
Which package should Debian users check?
The affected software entry identifies the Debian libass package.
2
Does the available record identify affected or fixed versions?
No affected-version or fixed-version information is provided in the available data.