MGASA-2014-0050

Source
https://advisories.mageia.org/MGASA-2014-0050.html
Import Source
https://advisories.mageia.org/MGASA-2014-0050.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2014-0050
Related
Published
2014-02-10T20:21:49Z
Modified
2014-02-10T20:21:40Z
Summary
Updated darktable package fixes two vulnerabilities
Details

Updated darktable package fixes security vulnerabilities:

Darktable before version 1.2.3 contains an embedded copy of LibRaw that incorrectly handled photo files. If a user was tricked into processing a specially crafted photo file, darktable could be made to crash, resulting in a denial of service (CVE-2013-1438, CVE-2013-1439).

References
Credits

Affected packages

Mageia:3 / darktable

Package

Name
darktable
Purl
pkg:rpm/mageia/darktable?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2-1.2.mga3

Ecosystem specific

{
    "section": "core"
}