Red Hat Security AdvisoryRHSA-2024:0343
LibRaw security update
Released 2024-01-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) LibRaw-0.19.4-2.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) LibRaw-devel-0.19.4-2.el7_9, LibRaw-static-0.19.4-2.el7_9
- Red Hat Enterprise Linux Server (v. 7) LibRaw-0.19.4-2.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) LibRaw-devel-0.19.4-2.el7_9, LibRaw-static-0.19.4-2.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) LibRaw-0.19.4-2.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) LibRaw-devel-0.19.4-2.el7_9, LibRaw-static-0.19.4-2.el7_9
Fixes 1 record
Priority LOW 36
Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00388 · Published 2023-02-17 · Fixed CWE-787
