LibRaw: Stack buffer overread

Background

LibRaw is a library for reading RAW files obtained from digital photo cameras.

Description

LibRaw incorrectly handles parsing DNG fields in some cases, potentially resulting in a buffer overread leading to denial of service.

Impact

An attacker capable of providing crafted input to LibRaw could trigger denial of service.

Workaround

There is no known workaround at this time.

Resolution

All LibRaw users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=media-libs/libraw-0.20.2"