Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 31: FEDORA-2020-07f0a49a9e Critical: mingw-LibRaw Buffer Overflow

fedora
Calendar Grey July 21, 2020
Dist Fedora Esm H88
Implementing a patch to address a memory leak in mingw-LibRaw on Fedora 31 enhances application stability.
Backport fix for CVE-2020-15503.

Summary

MinGW Windows LibRaw library.

Backport fix for CVE-2020-15503.

* Mon Jul 13 2020 Sandro Mani - 0.19.5-4

- Backport patch for CVE-2020-15503

* Wed Jan 29 2020 Fedora Release Engineering - 0.19.5-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

* Tue Oct 8 2019 Sandro Mani - 0.19.5-2

- Rebuild (Changes/Mingw32GccDwarf2)

[ 1 ] Bug #1853479 - CVE-2020-15503 mingw-LibRaw: LibRaw: lack of thumbnail size range check can lead to buffer overflow [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1853479

su -c 'dnf upgrade --advisory FEDORA-2020-07f0a49a9e' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 31
Version: 0.19.5
Release: 4.fc31
Summary: Library for reading RAW files obtained from digital photo cameras

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here