Security update for libraw
This update for libraw fixes the following issues:
* CVE-2017-6890: A boundary error within the "foveon_load_camf()" function was fixed. [boo#1039209]
* CVE-2017-6889: An integer overflow error within the "foveon_load_camf()" function was fixed. [boo#1039210]
* CVE-2017-6887: A memory corruption via e.g. a specially crafted KDC file parse_tiff_ifd() was fixed. [boo#1039379]
* CVE-2017-6886: A memory corruption in parse_tiff_ifd() function was fixed. [boo#1039380]
-
Submitted by
Petr Gajdos (pgajdos)
Fixed bugs
bnc#1039380
VUL-1: CVE-2017-6886: libraw: memory corruption in parse_tiff_ifd() func (internal/dcraw_common.cpp)
bnc#1039210
VUL-1: CVE-2017-6889: libraw: integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c)
bnc#1039209
VUL-1: CVE-2017-6890: libraw: boundary error within the "foveon_load_camf()" function (dcraw_foveon.c)
bnc#1039379
VUL-1: CVE-2017-6887: libraw: memory corruption via e.g. a specially crafted KDC file (parse_tiff_ifd() func internal/dcraw_common.cpp)
