Red Hat Security Advisory: libkdcraw security update

Fixed packages 9

Vulnerabilities 5

• Unscored —
  CVE-2018-5800

  An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions…

  kodi dcraw libraw rawtherapee Debian Ubuntu
  Dec 7, 2018
• Unscored —
  CVE-2018-5801

  An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploite…

  kodi dcraw libraw rawtherapee Debian Ubuntu
  Dec 7, 2018
• Unscored —
  CVE-2018-5802

  An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRa…

  kodi dcraw libraw rawtherapee Debian Ubuntu
  Dec 7, 2018
• Unscored —
  CVE-2018-5805

  A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to…

  kodi dcraw libraw rawtherapee Debian Ubuntu
  Dec 7, 2018
• Unscored —
  CVE-2018-5806

  An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can b…

  kodi dcraw libraw rawtherapee Debian Ubuntu
  Dec 7, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1553332
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1553334
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1553335
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1591887
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1591897
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3065.json
• report
  https://access.redhat.com/security/cve/CVE-2018-5800
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5800
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5800
• article
  https://packetstormsecurity.com/files/146172/secunia-libraw.txt
• report
  https://access.redhat.com/security/cve/CVE-2018-5801
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5801
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5801
• report
  https://access.redhat.com/security/cve/CVE-2018-5802
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5802
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5802
• report
  https://access.redhat.com/security/cve/CVE-2018-5805
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5805
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5805
• report
  https://access.redhat.com/security/cve/CVE-2018-5806
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5806
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5806