tocsin

Debian/libraw: unknown

The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.

Action: Upgrade libraw to 0.15.4-1 or later.

Affected

introducedfixedlast affected
00.15.4-1-

Fixed versions

0.15.4-1

Sources

published · modified · JSON