Lucene search

K
centosCentOS ProjectCESA-2024:0343
HistoryJan 26, 2024 - 6:08 p.m.

LibRaw security update

2024-01-2618:08:08
CentOS Project
lists.centos.org
15
centos
security update
libraw
buffer overflow
cve-2021-32142
digital photo cameras
raw files
redhat.

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.4%

CentOS Errata and Security Advisory CESA-2024:0343

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

  • LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp (CVE-2021-32142)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2024-January/099213.html

Affected packages:
LibRaw
LibRaw-devel
LibRaw-static

Upstream details at:
https://access.redhat.com/errata/RHSA-2024:0343