[ GLSA 202010-05 ] LibRaw

[GLSA]

Gentoo Linux Security Advisory

Title: LibRaw: Multiple vulnerabilities (GLSA 202010-05)
Severity: normal
Exploitable: local, remote
Date: 2020-10-20
Bug(s): #744190
ID: 202010-05

Synopsis

Multiple vulnerabilities have been found in LibRaw, the worst of
which may allow attackers to execute arbitrary code.


Background

LibRaw is a library for reading RAW files obtained from digital photo
cameras.


Affected Packages

Package: media-libs/libraw
Vulnerable: < 0.20.0
Unaffected: >= 0.20.0
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in LibRaw. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to open a specially crafted image
file using an application linked against LibRaw, possibly resulting in
execution of arbitrary code with the privileges of the process or a
Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All LibRaw users should upgrade to the latest version: