Updated libraw packages fix security vulnerabilities

🗓️ 05 Oct 2017 20:08:40Reported by Gentoo FoundationType

Updated libraw packages fix security vulnerabilities. Floating point exception and buffer overflows discovered in LibRaw 0.18.2, 0.18.3, and 0.18.4

Reporter	Title	Published	Views	Family All 128
FreeBSD	libraw -- denial of service and remote code execution	11 Sep 201700:00	–	freebsd
FreeBSD	libraw -- buffer overflow	12 Sep 201700:00	–	freebsd
AlpineLinux	CVE-2017-13735	29 Aug 201706:00	–	alpinelinux
AlpineLinux	CVE-2017-14265	11 Sep 201709:00	–	alpinelinux
ArchLinux	[ASA-201709-18] libraw: multiple issues	22 Sep 201700:00	–	archlinux
BDU FSTEC	The vulnerability of the `kodak_radc_load_raw` function in the `dcraw_common.cpp` component of the LibRaw image processing library allows a hacker to trigger a service failure.	3 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the processCanonCameraInfo function in the LibRaw image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.	14 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the xtrans_interpolate function in the internal/dcraw_common.cpp component of the LibRaw image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.	14 Nov 202300:00	–	bdu_fstec
CNVD	LibRaw 'kodak_radc_load_raw' Function Denial of Service Vulnerability	30 Aug 201700:00	–	cnvd
CNVD	LibRaw Buffer Overflow Vulnerability (CNVD-2017-33276)	13 Sep 201700:00	–	cnvd

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	5	any	libraw	0.16.2-1.4	libraw-0.16.2-1.4.noarch.rpm
Mageia	6	any	libraw	0.18.5-1	libraw-0.18.5-1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
lists	www.lists.opensuse.org/opensuse-updates/2017-09/msg00099.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/4OTWHVODHFROYHMCNRUAZHNZDBH7YSPO/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/OPKCTEX7MK4ILYKIBQBK3VBM5U5CRJKK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/CMHXYQOFX5OQSBWNNMCVGJLYXTZHXYTM/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/TVI7PQ5NTNFOL4EQTLNZOPGCDLKJKXST/
libraw	www.libraw.org/news/libraw-0-18-4

05 Oct 2017 20:08Current

4.1Medium risk

Vulners AI Score4.1

CVSS 27.5

CVSS 39.8

EPSS0.01021