Oval Definition:oval:org.opensuse.security:def:79267
Revision Date:2018-10-23Version:1
Title:Security update for libraw (Low)
Description:

This update for libraw fixes the following issues:

Security issues fixed:

- CVE-2018-5800: Fixed heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function (bsc#1084691). - CVE-2018-5801: Fixed NULL pointer dereference in LibRaw::unpack function (bsc#1084690). - CVE-2018-5802: Fixed out-of-bounds read in kodak_radc_load_raw function (bsc#1084688). - CVE-2018-5813: Fixed infinite loop in the parse_minolta function (bsc#1103200) - CVE-2018-5810: Fixed a heap-based buffer overflow in rollei_load_raw (bsc#1103353)

Family:unixClass:patch
Status:Reference(s):1084688
1084690
1084691
1103200
1103353
CVE-2018-5800
CVE-2018-5801
CVE-2018-5802
CVE-2018-5810
CVE-2018-5813
SUSE-SU-2018:3343-1
Platform(s):SUSE Linux Enterprise Desktop 12 SP3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND libraw9-0.15.4-21.1 is installed
  • BACK