SUSE-SU-2019:0002-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 02 Jan 2019, 10:38
Last modified:04 Feb 2026, 04:11

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

02 Jan 2019, 10:38
Published
Vulnerability first disclosed
04 Feb 2026, 04:11
Last Modified
Vulnerability information updated

Description

Security update for libraw This update for libraw fixes the following issues: Security issues fixed: - CVE-2018-5808: Fixed a stack-based buffer overflow and code execution vulnerability in find_green() function internal/dcraw_common.cpp (bsc#1118894). - CVE-2018-5805: Fixed a boundary error within the quicktake_100_load_raw function (bsc#1097973) - CVE-2018-5806: Fixed a a NULL pointer dereference in the leaf_hdr_load_raw function (bsc#1097974)

Affected Systems

  • suse•libraw&distro=SUSE Linux Enterprise Desktop 12 SP3

    < 0.15.4-27.1

  • suse•libraw&distro=SUSE Linux Enterprise Desktop 12 SP4

    < 0.15.4-27.1

  • suse•libraw&distro=SUSE Linux Enterprise Software Development Kit 12 SP3

    < 0.15.4-27.1

  • suse•libraw&distro=SUSE Linux Enterprise Software Development Kit 12 SP4

    < 0.15.4-27.1

  • suse•libraw&distro=SUSE Linux Enterprise Workstation Extension 12 SP3

    < 0.15.4-27.1

  • suse•libraw&distro=SUSE Linux Enterprise Workstation Extension 12 SP4

    < 0.15.4-27.1

References (7)