SUSE-SU-2025:1380-1
Security update for libraw
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for libraw fixes the following issues: - CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct function (bsc#1241585) - CVE-2025-43964: Fixed tag 0x412 processing in phase_one_correct does not enforce minimum w0 and w1 values (bsc#1241584)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.5 | libraw-devel, libraw-devel-static | 0.15.4-45.1 |
1 kaynaktaki 2 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.5 | libraw-devel | 0.15.4-45.1 |
| SUSE Linux Enterprise 12.5 | libraw-devel-static | 0.15.4-45.1 |
Referanslar
- https://bugzilla.suse.com/1241584
- https://bugzilla.suse.com/1241585
- https://lists.suse.com/pipermail/sle-updates/2025-April/039092.html
- https://www.suse.com/security/cve/CVE-2015-3885/
- https://www.suse.com/security/cve/CVE-2015-8367/
- https://www.suse.com/security/cve/CVE-2025-43962/
- https://www.suse.com/security/cve/CVE-2025-43964/
- https://www.suse.com/support/security/rating/