SUSE-SU-2019:0127-1

Advisory lineage Upstream: 6 Downstream: 0
Published: 18 Jan 2019, 13:20
Last modified:04 Feb 2026, 04:21

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Jan 2019, 13:20
Published
Vulnerability first disclosed
04 Feb 2026, 04:21
Last Modified
Vulnerability information updated

Description

Security update for libraw This update for libraw fixes the following issues: Security issues fixed: - CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of libraw_cxx.cpp (bsc#1120500) - CVE-2018-20364: Fixed a NULL pointer dereference in the copy_bayer function of libraw_cxx.cpp (bsc#1120499) - CVE-2018-20363: Fixed a NULL pointer dereference in the raw2image function of libraw_cxx.cpp (bsc#1120498) - CVE-2018-5817: Fixed an infinite loop in the unpacked_load_raw function of dcraw_common.cpp (bsc#1120515) - CVE-2018-5818: Fixed an infinite loop in the parse_rollei function of dcraw_common.cpp (bsc#1120516) - CVE-2018-5819: Fixed a denial of service in the parse_sinar_ia function of dcraw_common.cpp (bsc#1120517)

Affected Systems

  • suse•libraw&distro=SUSE Linux Enterprise Desktop 12 SP3

    < 0.15.4-30.1

  • suse•libraw&distro=SUSE Linux Enterprise Desktop 12 SP4

    < 0.15.4-30.1

  • suse•libraw&distro=SUSE Linux Enterprise Software Development Kit 12 SP3

    < 0.15.4-30.1

  • suse•libraw&distro=SUSE Linux Enterprise Software Development Kit 12 SP4

    < 0.15.4-30.1

  • suse•libraw&distro=SUSE Linux Enterprise Workstation Extension 12 SP3

    < 0.15.4-30.1

  • suse•libraw&distro=SUSE Linux Enterprise Workstation Extension 12 SP4

    < 0.15.4-30.1

References (13)