GLSA-202208-07 : LibRaw: Stack buffer overread

The remote host is affected by the vulnerability described in GLSA-202208-07 LibRaw: Stack buffer overread - Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identifyprocessdngfields in identify.cpp. CVE-2020-24870 Note that Nessus has not tested for this issue but has instead relied...

RLSA-2021:4381 Moderate: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of Rocky Linux. The following packages have been upgraded to a later upstream version: gdm 40.0, webkit2gtk3 2.32.3. BZ1909300 Security Fixes: webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution CVE-2020-13558...

CVE-2020-24870

CVE-2020-24870 affects LibRaw: a stack-based buffer overflow in LibRaw::identify_process_dng_fields (identify.cpp). Public details confirm the vulnerability in LibRaw prior to version 0.20.1. Impact per connected advisory notes potential code execution or crash. Remediation/fix: upgrade LibRaw to...