MGASA-2017-0223

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0223.html

Import Source

https://advisories.mageia.org/MGASA-2017-0223.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2017-0223

Related

Published

2017-07-28T18:12:15Z

Modified

2017-07-28T17:50:08Z

Summary

Updated libraw packages fix security vulnerabilities

Details

A memory corruption in parsetiffifd() function (CVE-2017-6886).

A memory corruption via e.g. a specially crafted KDC file parsetiffifd() (CVE-2017-6887).

An integer overflow error within the "foveonloadcamf()" function (CVE-2017-6889).

A boundary error within the "foveonloadcamf()" function (CVE-2017-6890).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.16.2-1.2.mga5

{
    "section": "core"
}