Lucene search

K
suseSuseOPENSUSE-SU-2018:4299-1
HistoryDec 29, 2018 - 12:15 a.m.

Security update for libraw (moderate)

2018-12-2900:15:57
lists.opensuse.org
21

EPSS

0.008

Percentile

82.3%

This update for libraw fixes the following issues:

The following security vulnerabilities were addressed:

  • CVE-2018-5804: Fixed a type confusion error within the identify function
    that could trigger a division by zero, leading to a denial of service
    (Dos). (boo#1097975)
  • CVE-2018-5805: Fixed a boundary error within the quicktake_100_load_raw
    function that could cause a stack-based buffer overflow and subsequently
    trigger a crash. (boo#1097973)
  • CVE-2018-5806: Fixed an error within the leaf_hdr_load_raw function that
    could trigger a NULL pointer deference, leading to a denial of service
    (DoS). (boo#1097974)
  • CVE-2018-5808: Fixed an error within the find_green function that could
    cause a stack-based buffer overflow and subsequently execute arbitrary
    code. (boo#1118894)
  • CVE-2018-5816: Fixed a type confusion error within the identify function
    that could trigger a division by zero, leading to a denial of service
    (DoS). (boo#1097975)