Ubuntu alert USN-7972-1 (opencc)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7972-1] OpenCC vulnerability
Date:
             
 
Wed, 21 Jan 2026 22:52:25 +0000
Message-ID:
             
 
<E1vih3p-0004Vz-9h@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7972-1
January 21, 2026

opencc vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

OpenCC could be made to crash if it received specially crafted input.

Software Description:
- opencc: simplified-traditional Chinese conversion library

Details:

It was discovered that OpenCC incorrectly handled truncated UTF-8 input.
An attacker could possibly use this issue to cause OpenCC to crash,
resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  libopencc1.1                    1.1.9+ds1-2ubuntu0.1
  opencc                          1.1.9+ds1-2ubuntu0.1

Ubuntu 24.04 LTS
  libopencc1.1                    1.1.7+ds1-1ubuntu0.1
  opencc                          1.1.7+ds1-1ubuntu0.1

Ubuntu 22.04 LTS
  libopencc1.1                    1.1.3+ds1-3ubuntu3.1
  opencc                          1.1.3+ds1-3ubuntu3.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7972-1
  CVE-2025-15536

Package Information:
  https://launchpad.net/ubuntu/+source/opencc/1.1.9+ds1-2ub...
  https://launchpad.net/ubuntu/+source/opencc/1.1.7+ds1-1ub...
  https://launchpad.net/ubuntu/+source/opencc/1.1.3+ds1-3ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=kJ9z
-----END PGP SIGNATURE-----