MGASA-2017-0223

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0223.html

Import Source

https://advisories.mageia.org/MGASA-2017-0223.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2017-0223

Upstream

Published

2017-07-28T18:12:15Z

Modified

2026-04-16T01:46:16Z

Summary

Updated libraw packages fix security vulnerabilities

Details

A memory corruption in parse_tiff_ifd() function (CVE-2017-6886).

A memory corruption via e.g. a specially crafted KDC file parse_tiff_ifd() (CVE-2017-6887).

An integer overflow error within the "foveon_load_camf()" function (CVE-2017-6889).

A boundary error within the "foveon_load_camf()" function (CVE-2017-6890).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.16.2-1.2.mga5

{
    "section": "core"
}

source

"https://advisories.mageia.org/MGASA-2017-0223.json"