tocsin

Alpine/libraw: critical 9.8

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer

Action: Upgrade libraw to 0.22.1-r0 or later.

Affected

introducedfixedlast affected
00.22.1-r0-

Fixed versions

0.22.1-r0

Sources

published · modified · JSON