Security fix for CVE-2015-3885

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Latest upstream bugfix. Fixed dcraw vulnerability in ljpeg_start()

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2015-3885 (dcraw input sanitization), bz #1221257

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 0.16.2, see http://www.libraw.org/download#changelog for details. Update to version 0.16.1, see http://www.libraw.org/download#changelog for details. Security fix for CVE-2015-3885.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update contains a fix for a bug which could cause dcraw write past array boundaries.

Additionally, it updates dcraw to version 9,25.0 which contains updated color matrices and supports the Canon EOS 5DS.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update contains a fix for a bug which could cause dcraw write past array boundaries.

Additionally, it updates ufraw to version 0.21, an upstream bugfix release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

[This DLA supersedes my wrong announcement using DLA 241-1]

CVE-2015-3885: Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.

We recommend that you upgrade your libraw packages.

-- Matteo F. Vescovi || Debian Developer GnuPG KeyID:
4096R/0x8062398983B2CF7A

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Rawstudio from github https://github.com/rawstudio/rawstudio/ .

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201701-60 (LibRaw: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in LibRaw. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could execute arbitrary code, cause a Denial of Service       condition, or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

The libraw library was updated to fix one security issue.

The following vulnerability was fixed :

  - boo#930683: CVE-2015-3885: dcraw/libraw: input     sanitization errors

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
83833	Fedora 20 : mingw-LibRaw-0.15.4-5.fc20 (2015-8266)	Nessus	Fedora Local Security Checks	2015/5/27	2021/1/11	medium
83837	Fedora 22 : LibRaw-0.16.2-1.fc22 (2015-8432)	Nessus	Fedora Local Security Checks	2015/5/27	2021/1/11	medium
83892	Fedora 22 : rawtherapee-4.2-9.fc22 (2015-8187)	Nessus	Fedora Local Security Checks	2015/5/29	2021/1/11	medium
83899	Fedora 21 : mingw-LibRaw-0.16.2-1.fc21 (2015-8498)	Nessus	Fedora Local Security Checks	2015/5/29	2021/1/11	medium
84029	Fedora 22 : dcraw-9.25.0-2.fc22 (2015-8621)	Nessus	Fedora Local Security Checks	2015/6/9	2021/1/11	medium
84031	Fedora 20 : dcraw-9.25.0-2.fc20 (2015-8671)	Nessus	Fedora Local Security Checks	2015/6/9	2021/1/11	medium
84032	Fedora 22 : ufraw-0.21-1.fc22 (2015-8699)	Nessus	Fedora Local Security Checks	2015/6/9	2021/1/11	medium
84094	Debian DLA-243-1 : libraw security update	Nessus	Debian Local Security Checks	2015/6/11	2021/1/11	medium
84857	Fedora 22 : rawstudio-2.1-0.1.20150511git983bda1.fc22 (2015-8196)	Nessus	Fedora Local Security Checks	2015/7/20	2021/1/11	medium
96746	GLSA-201701-60 : LibRaw: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/25	2026/1/2	critical
83898	Fedora 21 : LibRaw-0.16.2-1.fc21 (2015-8482)	Nessus	Fedora Local Security Checks	2015/5/29	2021/1/11	medium
84034	Fedora 21 : ufraw-0.21-1.fc21 (2015-8717)	Nessus	Fedora Local Security Checks	2015/6/9	2021/1/11	medium
83804	openSUSE Security Update : libraw (openSUSE-2015-378)	Nessus	SuSE Local Security Checks	2015/5/26	2021/1/19	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium