FEDORA-2018-f208f9eb3e — security update for LibRaw

obsolete

FEDORA-2018-f208f9eb3e created by limb 7 years ago for Fedora 27

CVE-2018-10529 fixed: out of bounds read in X3F parser
CVE-2018-10528 fixed: possible stack overrun in X3F parser

This update has been submitted for testing by limb.

This update has been pushed to testing.

This update has been obsoleted by LibRaw-0.18.11-1.fc27.

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

7 years ago

in testing

7 years ago

Builds

BZ#1574322 CVE-2018-10528 LibRaw: Stack-based buffer overflow in libraw_cxx.cpp:utf2char() allows for potential code execution [fedora-all]

BZ#1574326 CVE-2018-10529 LibRaw: Out-of-bounds read in X3F property table list functionality in libraw_x3f.cpp and libraw_cxx.cpp [fedora-all]

BZ#1574486 LibRaw-0.18.10 is available

LibRaw-0.18.10-1.fc27

passed