Stay Secure with the Latest Linux Advisories

security advisorysecurity patchmemory management

Mageia: 2020-0368 Security Advisory for LibRaw Memory Management Issue

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength. (CVE-2020-15503) . MGASA-2020-0368 - Updated libraw packages fix a security vulnerability Publication date: 17 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0368.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-15503 LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength. (CVE-2020-15503) References: - https://bugs.mageia.org/show_bug.cgi?id=26933 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/DNGDWTO45TU4KGND75EUUEGUMNSOYC7H/ - - - https://www.cve.org/CVERecord?id=CVE-2020-15503 SRPMS: - 7/core/libraw-0.19.2-1.1.mga7 . Revised libraw editions resolve a major security vulnerability in Mageia related to memory oversight. Find further information within.. libraw security, Mageia update, memory management issue, thumbnail check, security patch. . Severity: Important. LinuxSecurity.com Team

Sep 17, 2020 •Important Mageia