Ubuntu 13.04 LTS: USN-1884-1 Moderate LibRaw DoS Attack

ubuntu

June 18, 2013

LibRaw could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

LibRaw could be made to crash or run programs as your login if it opened a

specially crafted file.

Software Description:

- libraw: raw image decoder library

Details:

It was discovered that LibRaw incorrectly handled broken full-color images.

If a user or automated system were tricked into processing a specially

crafted raw image, applications linked against LibRaw could be made to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service software update ubuntu libraw

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  libraw5                         0.14.7-0ubuntu1.13.04.1

Ubuntu 12.10:
  libraw5                         0.14.7-0ubuntu1.12.10.1

Ubuntu 12.04 LTS:
  libraw5                         0.14.4-0ubuntu2.1

After a standard system update you need to restart your session to make all
the necessary changes.