USN-4837-1: LibSass vulnerabilities
15 March 2021
Several security issues were fixed in LibSass.
Releases
Packages
- libsass - C/C++ port of the Sass CSS precompiler
Details
It was discovered that LibSass incorrectly handled certain specially crafted
sass file. An attacker could possibly use this issue to cause a denial of
service or other unspecified impact.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
libsass0
-
3.4.8-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.