SUSE-SU-2017:3392-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 21 Dec 2017, 07:30
Last modified:04 Feb 2026, 02:32

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Dec 2017, 07:30
Published
Vulnerability first disclosed
04 Feb 2026, 02:32
Last Modified
Vulnerability information updated

Description

Security update for libraw This update for libraw fixes the following issues: Security issues fixed: - CVE-2017-13735: A floating point exception in kodak_radc_load_raw could be used by attackers to crash a libraw using application (bsc#1060321) - CVE-2017-14608: An out-of-bounds read in the kodak_65000_load_raw function could be used for crashing or information leak from the libraw library (bsc#1063798) - CVE-2017-16909: Fix heap-buffer overflow in the LibRaw::panasonic_load_raw() function (bsc#1072385).

Affected Systems

  • suse•libraw&distro=SUSE Linux Enterprise Desktop 12 SP2

    < 0.15.4-16.1

  • suse•libraw&distro=SUSE Linux Enterprise Desktop 12 SP3

    < 0.15.4-16.1

  • suse•libraw&distro=SUSE Linux Enterprise Software Development Kit 12 SP2

    < 0.15.4-16.1

  • suse•libraw&distro=SUSE Linux Enterprise Software Development Kit 12 SP3

    < 0.15.4-16.1

  • suse•libraw&distro=SUSE Linux Enterprise Workstation Extension 12 SP2

    < 0.15.4-16.1

  • suse•libraw&distro=SUSE Linux Enterprise Workstation Extension 12 SP3

    < 0.15.4-16.1

References (7)