FEDORA-2018-08ea7a5f0b — security update for LibRaw

stable

LibRaw-0.18.11-1.fc27

FEDORA-2018-08ea7a5f0b created by limb 6 years ago for Fedora 27

https://www.libraw.org/news/libraw-0-18-11

CVE-2018-10529 fixed: out of bounds read in X3F parser
CVE-2018-10528 fixed: possible stack overrun in X3F parser

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-08ea7a5f0b

This update has been submitted for testing by limb.

6 years ago

This update has obsoleted LibRaw-0.18.10-1.fc27, and has inherited its bugs and notes.

6 years ago

This update has been pushed to testing.

6 years ago

cserpentis commented & provided feedback 6 years ago

karma

works for me in a VM

hreindl commented & provided feedback 6 years ago

karma

works for me

pwalter commented & provided feedback 6 years ago

karma

Works

This update has been submitted for batched by bodhi.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

LibRaw-0.18.11-1.fc27

BZ#1574322 CVE-2018-10528 LibRaw: Stack-based buffer overflow in libraw_cxx.cpp:utf2char() allows for potential code execution [fedora-all]

BZ#1574326 CVE-2018-10529 LibRaw: Out-of-bounds read in X3F property table list functionality in libraw_x3f.cpp and libraw_cxx.cpp [fedora-all]

BZ#1574486 LibRaw-0.18.10 is available

BZ#1576801 LibRaw-0.18.11 is available

LibRaw-0.18.11-1.fc27

Automated Test Results

ignored