shield Security update for libraw

SUSE-SLE-WE-12-SP4-2019-127

This update for libraw fixes the following issues: Security issues fixed: - CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of libraw_cxx.cpp (bsc#1120500) - CVE-2018-20364: Fixed a NULL pointer dereference in the copy_bayer function of libraw_cxx.cpp (bsc#1120499) - CVE-2018-20363: Fixed a NULL pointer dereference in the raw2image function of libraw_cxx.cpp (bsc#1120498) - CVE-2018-5817: Fixed an infinite loop in the unpacked_load_raw function of dcraw_common.cpp (bsc#1120515) - CVE-2018-5818: Fixed an infinite loop in the parse_rollei function of dcraw_common.cpp (bsc#1120516) - CVE-2018-5819: Fixed a denial of service in the parse_sinar_ia function of dcraw_common.cpp (bsc#1120517)

• Release Date
  Jan 18 2019
• References
  Bugzilla: 1120498, 1120499, 1120515, 1120517, 1120516, 1120500
  CVEs: CVE-2018-5818, CVE-2018-5817, CVE-2018-20365, CVE-2018-20364, CVE-2018-20363, CVE-2018-5819
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Workstation Extension 12.4 x86_64

• Packages
  libraw
  Library for reading RAW files obtained from digital photo cameras

  0.15.4-30.1

  lock src

  libraw9
  Library for reading RAW files obtained from digital photo cameras

  0.15.4-30.1

  lock rpm