{"id":"CVE-2016-7971","aliases":["ALPINE-CVE-2016-7971","EUVD-2016-8819","SUSE-SU-2016:3107-1"],"status":"rejected","title":"Security update for libass","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-12-13T08:19:14Z","modified":"2026-09-22T06:30:44Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libass","fixed_in":["0.13.4-r0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.4-r0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-3.1"}]}],"bundled":4}],"references":[{"url":"https://security.alpinelinux.org/vuln/CVE-2016-7971","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163107-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1002982","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7972","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-7971","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"rejected","published":"2017-03-03T16:00:00Z","modified":"2017-03-03T15:57:01Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2016-8819","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2017-03-03T16:00:00Z","modified":"2017-03-03T15:57:01Z","updated_at":"2026-11-03T04:08:13.792806Z"}],"nvd":[{"id":"CVE-2016-7971","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"rejected","published":"2017-03-03T16:59:00.683Z","modified":"2023-11-07T02:35:21.12Z","updated_at":"2026-11-02T14:03:37.238712Z"}],"osv":[{"id":"ALPINE-CVE-2016-7971","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2017-03-03T16:59:00.683Z","modified":"2026-09-22T06:30:44.572153139Z","updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2016-7971","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2017-03-03T16:59:00Z","modified":"2026-04-10T03:53:34.368807Z","updated_at":"2026-11-02T15:44:03.171316Z"},{"id":"SUSE-SU-2016:3107-1","title":"Security update for libass","description":"\n\nThis update for libass fixes the following issues:\n\nCVE-2016-7969, CVE-2016-7970, CVE-2016-7971, CVE-2016-7972: Fixed multiple memory allocation issues found by fuzzing (bsc#1002982).\n \n","status":"published","published":"2016-12-13T08:19:14Z","modified":"2026-02-04T02:49:06.756206Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}