Most recent entries from all

ALSA-2024:2137 — Low: LibRaw security update

Affected: AlmaLinux:9: LibRaw, AlmaLinux:9: LibRaw-devel

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

* LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-03406

cnvd-2023-43232

EUVD-2026-6771

fkie_cve-2023-1729

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.

GHSA-5gp6-9w92-5752

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.

gsd-2023-1729

OESA-2023-1280 — LibRaw security update

Affected: openEuler:20.03-LTS-SP1: LibRaw, openEuler:20.03-LTS-SP3: LibRaw, openEuler:22.03-LTS: LibRaw, openEuler:22.03-LTS-SP1: LibRaw

LibRaw is a library for reading RAW files from digital photo cameras (CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported).It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzers, and other programs using RAW files as the initial data. Security Fix(es): A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.(CVE-2023-1729)

openSUSE-SU-2024:12901-1 — libraw-devel-0.21.1-2.1 on GA media

libraw-devel-0.21.1-2.1 on GA media

SUSE-SU-2023:2196-1 — Security update for libraw

Security update for libraw

UBUNTU-CVE-2023-1729

Affected: Ubuntu:Pro:16.04:LTS: libraw, Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:Pro:18.04:LTS: libraw, Ubuntu:18.04:LTS: darktable, Ubuntu:18.04:LTS: dcraw and 34 more

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.

WID-SEC-W-2024-0995 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder seine Privilegien zu erweitern.