Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora 23: 2016-9214 Moderate: Shotwell File Upload Vulnerability

fedora
Calendar Grey May 27, 2015
Scroller Fedora
Fedora 22 has released an update that resolves an input validation vulnerability found in Rawtherapee, pertaining to CVE-2015-3885.
Security fix for CVE-2015-3885 (dcraw input sanitization), bz #1221257

Summary

Rawtherapee is a RAW image processing software. It gives full control over

many parameters to enhance the raw picture before finally exporting it

to some common image format.

Update Information:

Security fix for CVE-2015-3885 (dcraw input sanitization), bz #1221257

Topics%20covered

Topics Covered

security advisory moderate fedora buffer overflow software update input sanitization rawtherapee

Change Log

* Wed May 13 2015 Matthew Miller - 4.2-9 - Security fix for CVE-2015-3885 (dcraw input sanitization), bz #1221257

References


[ 1 ] Bug #1221257 - CVE-2015-3885 rawtherapee: dcraw: input sanitization flaw leading to buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1221257

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rawtherapee' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: rawtherapee
Product: Fedora 22
Version: 4.2
Release: 9.fc22
URL: http://www.rawtherapee.com/
Summary: Raw image processing software

Topics%20covered

Topics Covered

security advisory moderate fedora buffer overflow software update input sanitization rawtherapee

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.