MGASA-2014-0081

Source
https://advisories.mageia.org/MGASA-2014-0081.html
Import Source
https://advisories.mageia.org/MGASA-2014-0081.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2014-0081
Related
Published
2014-02-17T00:25:25Z
Modified
2014-02-17T00:25:20Z
Summary
Updated rawtherapee package fixes security vulnerability
Details

Due to flaws in the embedded copy of dcraw in rawtherapee, corrupt input files might trigger a division by zero, an infinite loop, or a null pointer dereference (CVE-2013-1438).

References
Credits

Affected packages

Mageia:4 / rawtherapee

Package

Name
rawtherapee
Purl
pkg:rpm/mageia/rawtherapee?distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.11-2.1.mga4

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / rawtherapee

Package

Name
rawtherapee
Purl
pkg:rpm/mageia/rawtherapee?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.7-3.1.mga3

Ecosystem specific

{
    "section": "core"
}