PT-2018-3831

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to an off-by-one error within the LibRaw::kodak ycbcr load raw function in the internal/dcraw common.cpp component of the LibRaw library. This error can lead to a heap-based buff...

PT-2018-3837

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.9 Description The issue is related to an out-of-bounds read in the internal/dcraw common.cpp component of the LibRaw image processing library. This can be exploited by a remote attacker to access confidential data...

libraw -- multiple DoS vulnerabilities

Secunia Research reports: CVE-2018-5800: An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. CVE-2017-5801: An error within the "LibRaw::unpack" function src/librawcxx.c...

Fedora 27 : mingw-LibRaw (2017-d3cd18fb03)

Update to version 0.18.5, see https://www.libraw.org/news/libraw-0-18-5 for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 27 : LibRaw (2017-f04296e37e)

Patch for CVE-2017-14348 ---- Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data ---- LibRaw 0.18.3 Fix for CVE-2017-13735 Additional checks for X-Trans CFA pattern data ---- Patch for CVE-2017-13735. Note...

Fedora 27 : mingw-LibRaw (2017-65f6ccf760)

Update to version 0.18.4, see https://github.com/LibRaw/LibRaw/blob/0.18-stable/Changelog.txt for details. ---- Update to version 0.18.3, see https://www.libraw.org/news/libraw-0-18-3 for details. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 27 : LibRaw (2017-0348398d64)

Fix for possible buffer overrun in kodak65000 decoder Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE SLED12 Security Update : libraw (SUSE-SU-2017:3392-1)

This update for libraw fixes the following issues: Security issues fixed : - CVE-2017-13735: A floating point exception in kodakradcloadraw could be used by attackers to crash a libraw using application bsc1060321 - CVE-2017-14608: An out-of-bounds read in the kodak65000loadraw function could be...

MGASA-2017-0468 Updated libraw packages fix security vulnerability

Invalid read memory access in the LibRaw::xtransinterpolate function. CVE-2017-16910...

Updated libraw packages fix security vulnerability

Invalid read memory access in the LibRaw::xtransinterpolate function. CVE-2017-16910...

SUSE-SU-2017:3392-1 Security update for libraw

This update for libraw fixes the following issues: Security issues fixed: - CVE-2017-13735: A floating point exception in kodakradcloadraw could be used by attackers to crash a libraw using application bsc1060321 - CVE-2017-14608: An out-of-bounds read in the kodak65000loadraw function could be...

Fedora Update for LibRaw FEDORA-2017-e68e87955b

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : LibRaw (2017-e68e87955b)

https://www.libraw.org/news/libraw-0-18-6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 26 Update: LibRaw-0.18.6-1.fc26

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

UBUNTU-CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

UBUNTU-CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...