shield Security update for libraw

SUSE-SLE-Product-WE-15-2019-5

This update for libraw fixes the following issues: Security issues fixed: The following security vulnerabilities were addressed: - CVE-2018-5813: Fixed an error within the "parse_minolta()" function (dcraw/dcraw.c) that could be exploited to trigger an infinite loop via a specially crafted file. This could be exploited to cause a DoS.(boo#1103200). - CVE-2018-5815: Fixed an integer overflow in the internal/dcraw_common.cpp:parse_qt() function, that could be exploited to cause an infinite loop via a specially crafted Apple QuickTime file. (boo#1103206) - CVE-2018-5804,CVE-2018-5816: Fixed a type confusion error in the identify function (bsc#1097975)

• Release Date
  Jan 2 2019
• References
  Bugzilla: 1103206, 1097975, 1103200
  CVEs: CVE-2018-5804, CVE-2018-5816, CVE-2018-5813, CVE-2018-5815
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Workstation Extension 15 x86_64

• Packages
  libraw
  Library for reading RAW files obtained from digital photo cameras

  0.18.9-3.5.1

  lock src

  libraw-devel
  Development files for libraw

  0.18.9-3.5.1

  lock rpm

  libraw16
  Library for reading RAW files obtained from digital photo cameras

  0.18.9-3.5.1

  lock rpm