1895 matches found
Security update for libraw (moderate)
openSUSE Security Update: Security update for libraw Announcement ID: openSUSE-SU-2020:1088-1 Rating: moderate References: 1173674 Cross-References: CVE-2020-15503 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for libraw...
SUSE-SU-2020:2029-1 Security update for libraw
This update for libraw fixes the following issues: - security update - added patches fix CVE-2020-15503 bsc1173674, lack of thumbnail size range check can lead to buffer overflow + libraw-CVE-2020-15503.patch...
SUSE-SU-2020:2028-1 Security update for libraw
This update for libraw fixes the following issues: - security update - added patches fix CVE-2020-15503 bsc1173674, lack of thumbnail size range check can lead to buffer overflow + libraw-CVE-2020-15503.patch...
[SECURITY] Fedora 31 Update: mingw-LibRaw-0.19.5-4.fc31
MinGW Windows LibRaw library...
[SECURITY] Fedora 32 Update: mingw-LibRaw-0.19.5-4.fc32
MinGW Windows LibRaw library...
Fedora 31 : mingw-LibRaw (2020-07f0a49a9e)
Backport fix for CVE-2020-15503. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Fedora: Security Advisory for mingw-LibRaw (FEDORA-2020-4f4c778096)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 32 : mingw-LibRaw (2020-4f4c778096)
Backport fix for CVE-2020-15503. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Fedora: Security Advisory for mingw-LibRaw (FEDORA-2020-07f0a49a9e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for LibRaw (FEDORA-2020-f407db0e65)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 31 : LibRaw (2020-f407db0e65)
Backported patch for CVE-2020-15503 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...
[SECURITY] Fedora 31 Update: LibRaw-0.19.5-3.fc31
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...
Fedora: Security Advisory for LibRaw (FEDORA-2020-f421eea477)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: LibRaw-0.19.5-3.fc32
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...
Fedora 32 : LibRaw (2020-f421eea477)
Backported patch for CVE-2020-15503 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...
libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::init_fuji_block
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4762894621999104 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
libraw:libraw_cr2_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5647329419067392 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
LibRaw Input Validation Error Vulnerability
LibRaw is a C++ library from the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images. An input validation error vulnerability exists in versions prior to LibRaw 0.20-RC1, which stems from the program failing to check the size of thumbnails. A remote attacker could explo...
CVE-2020-15503
LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...
DEBIAN-CVE-2020-15503
LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...