USN-7972-1: OpenCC vulnerability

USN-7972-1: OpenCC vulnerability

Publication date: 21 January 2026
Overview: OpenCC could be made to crash if it received specially crafted input.

Packages
opencc - simplified-traditional Chinese conversion library

Details
It was discovered that OpenCC incorrectly handled truncated UTF-8 input.
An attacker could possibly use this issue to cause OpenCC to crash,
resulting in a denial of service.

Update instructions
In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

25.10 questing

• libopencc1.1 – 1.1.9+ds1-2ubuntu0.1
• opencc – 1.1.9+ds1-2ubuntu0.1

24.04 LTS noble

• libopencc1.1 – 1.1.7+ds1-1ubuntu0.1
• opencc – 1.1.7+ds1-1ubuntu0.1

22.04 LTS jammy

• libopencc1.1 – 1.1.3+ds1-3ubuntu3.1
• opencc – 1.1.3+ds1-3ubuntu3.1