Fedora 27 : LibRaw (2017-f04296e37e)

Patch for CVE-2017-14348 ---- Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data ---- LibRaw 0.18.3 Fix for CVE-2017-13735 Additional checks for X-Trans CFA pattern data ---- Patch for CVE-2017-13735. Note...

Fedora 27 : mingw-LibRaw (2017-65f6ccf760)

Update to version 0.18.4, see https://github.com/LibRaw/LibRaw/blob/0.18-stable/Changelog.txt for details. ---- Update to version 0.18.3, see https://www.libraw.org/news/libraw-0-18-3 for details. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 27 : LibRaw (2017-0348398d64)

Fix for possible buffer overrun in kodak65000 decoder Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 27 : mingw-LibRaw (2017-d3cd18fb03)

Update to version 0.18.5, see https://www.libraw.org/news/libraw-0-18-5 for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLED12 Security Update : libraw (SUSE-SU-2017:3392-1)

This update for libraw fixes the following issues: Security issues fixed : - CVE-2017-13735: A floating point exception in kodakradcloadraw could be used by attackers to crash a libraw using application bsc1060321 - CVE-2017-14608: An out-of-bounds read in the kodak65000loadraw function could be...

Updated libraw packages fix security vulnerability

Invalid read memory access in the LibRaw::xtransinterpolate function. CVE-2017-16910...

MGASA-2017-0468 Updated libraw packages fix security vulnerability

Invalid read memory access in the LibRaw::xtransinterpolate function. CVE-2017-16910...

SUSE-SU-2017:3392-1 Security update for libraw

This update for libraw fixes the following issues: Security issues fixed: - CVE-2017-13735: A floating point exception in kodakradcloadraw could be used by attackers to crash a libraw using application bsc1060321 - CVE-2017-14608: An out-of-bounds read in the kodak65000loadraw function could be...

Fedora Update for LibRaw FEDORA-2017-e68e87955b

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : LibRaw (2017-e68e87955b)

https://www.libraw.org/news/libraw-0-18-6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 26 Update: LibRaw-0.18.6-1.fc26

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

UBUNTU-CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

UBUNTU-CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

Libraw 0.18.5 Denial Of Service Vulnerability

Libraw version 0.8.15 suffers from a denial of service vulnerability. ====================================================================== LibRaw Multiple Denial of Service Vulnerabilities ====================================================================== Table of Contents Affected...

libraw -- multiple DoS vulnerabilities

Secunia Research reports: CVE-2017-16909: An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image. CVE-2017-16910: An error within the...

Ubuntu 14.04 LTS / 16.04 LTS : LibRaw vulnerabilities (USN-3492-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3492-1 advisory. It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted...