-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 01:02:37 +0200 Source: libass Architecture: source Version: 1:0.17.1-1+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Daniel Leidert <dleidert@debian.org> Changes: libass (1:0.17.1-1+deb12u1) bookworm-security; urgency=medium . * Non-maintainer upload by the Debian LTS team. * d/patches/CVE-2026-61627.patch: Add patch to fix CVE-2026-61627. - Fix an out-of-bounds read and write. Checksums-Sha1: 1eb376194a4f2803fd04a896367c295d27c927dc 2140 libass_0.17.1-1+deb12u1.dsc ae942a675f808b6a0d0b10bd38e8dc6bf669a716 546658 libass_0.17.1.orig.tar.gz 06bf6f92581eaf1b2aa58e5230b98c7f68ac11be 17036 libass_0.17.1-1+deb12u1.debian.tar.xz 07f56e982aae992198da84756346b1ecad3a149c 6085 libass_0.17.1-1+deb12u1_source.buildinfo Checksums-Sha256: 5c4c02e00f3ab9c65ed2934752921c9d47013632a0ca7f56007693616a7d52d4 2140 libass_0.17.1-1+deb12u1.dsc d653be97198a0543c69111122173c41a99e0b91426f9e17f06a858982c2fb03d 546658 libass_0.17.1.orig.tar.gz 5aba1f03fd7c0340fb53f32c6b81f9c80549dc3b1a8098b0a19e582ef3618cff 17036 libass_0.17.1-1+deb12u1.debian.tar.xz c486023f06611c22209c42b9dccfea1e0f6c469f2a9d5bef625a359e5e70ad84 6085 libass_0.17.1-1+deb12u1_source.buildinfo Files: 62c3a73224276cde4548eea0aae07fe7 2140 libs optional libass_0.17.1-1+deb12u1.dsc 3a0e357a4334bd48e58d063624b36303 546658 libs optional libass_0.17.1.orig.tar.gz 6280e2fdccb924d6cf6b2b52f2ebc89c 17036 libs optional libass_0.17.1-1+deb12u1.debian.tar.xz e1e47819099667040a36d0f072e7c679 6085 libs optional libass_0.17.1-1+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmqYMK0ACgkQS80FZ8KW 0F3C9BAAxkxaIEh78pDw5L0legM42rEVSI1vy+TcePE9Kov1m+dY0Y7EQfuqb12n D4BlzVkaV4wLk9NN5B3Yjo6R47Kf5uSaSV46cUBzLtww0RRt+fs2p8+oynY8HQX6 kAbtVj6hfboh9ABpfbAmtpuZWO3n5bByHOju6GYNiOzCdLhu+zvyFcFz+6PPTFuU mTu9hk7kJXkZbrI3vAXa48ZCbABTQvxL/kXps+w1vkWWufHIaDL3kgHD3wZpDK5Q yHW+IUwB8A1aiCoOJb3t9+5P5xeMb2p0x8694GrlmYpUUKfsWON3Z97AV7vWsL8U Xa9epCZUXxVs+59lnjSUzMdVOEIJqgwdOugFT7OauiNLoSZWl90WfS4b53t0d7lP AjPwOalXwt3eeaXLpjQ9ivUiMcYwtGAm+1ldFBRUQVNQPZAUhrYyspWClPiuIfUd PehkwmmRH0vWvy4o9kLlnFJhdfmTyU3X297qym8H8TrB1sobMgVv7ul1hz2Fbz8D M4qr6BBDFBmBPU/2QXoHTbfEM8ZLIMtLiiLtpHuE/+khCBeCeIRlYU4RzzEKL/l7 ue0o5nK6amTxv3Ct65tEpoH5omBVwa4vGAjIZWAiFMgTUqtS5LH+vSxIae/DycPf tw85BBxmun2cOcA0VtcOZkKqqM5N6lpEYrnKWc86SqwpaaxdoiI= =YJVi -----END PGP SIGNATURE-----