Ubuntu 23.04: CVE-2023-6138 High: Libraw Buffer Overflow

ubuntu

June 5, 2023

Several security issues were fixed in LibRaw.

Summary

Several security issues were fixed in LibRaw.

Software Description:

- libraw: raw image decoder library

Details:

It was discovered that LibRaw incorrectly handled photo files. If a user or

automated system were tricked into processing a specially crafted photo

file, a remote attacker could cause applications linked against LibRaw to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service critical Ubuntu libraw

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   libraw20                        0.20.2-2ubuntu2.23.04.1

Ubuntu 22.10:
   libraw20                        0.20.2-2ubuntu2.22.10.1

Ubuntu 22.04 LTS:
   libraw20                        0.20.2-2ubuntu2.22.04.1

Ubuntu 20.04 LTS:
   libraw19                        0.19.5-1ubuntu1.2

After a standard system update you need to restart your session to make all
the necessary changes.