This update for libraw fixes the following issues:
The following security vulnerabilities were addressed:
- CVE-2018-5804: Fixed a type confusion error within the identify function that
could trigger a division by zero, leading to a denial of service (Dos).
(boo#1097975)
- CVE-2018-5805: Fixed a boundary error within the quicktake_100_load_raw
function that could cause a stack-based buffer overflow and subsequently
trigger a crash. (boo#1097973)
- CVE-2018-5806: Fixed an error within the leaf_hdr_load_raw function that
could trigger a NULL pointer deference, leading to a denial of service (DoS).
(boo#1097974)
- CVE-2018-5808: Fixed an error within the find_green function that could
cause a stack-based buffer overflow and subsequently execute arbitrary code.
(boo#1118894)
- CVE-2018-5816: Fixed a type confusion error within the identify function that
could trigger a division by zero, leading to a denial of service (DoS).
(boo#1097975)
-
Submitted by
Petr Gajdos (pgajdos)