——————————————————————————–
Fedora Update Notification
FEDORA-2015-8482
2015-05-19 11:38:01
——————————————————————————–
Name : LibRaw
Product : Fedora 21
Version : 0.16.2
Release : 1.fc21
URL : http://www.libraw.org
Summary : Library for reading RAW files obtained from digital photo cameras
Description :
LibRaw is a library for reading RAW files obtained from digital photo
cameras (CRW/CR2, NEF, RAF, DNG, and others).
LibRaw is based on the source codes of the dcraw utility, where part of
drawbacks have already been eliminated and part will be fixed in future.
——————————————————————————–
Update Information:
Latest upstream bugfix.
Fixed dcraw vulnerability in ljpeg_start()
——————————————————————————–
ChangeLog:
* Sat May 16 2015 Jon Ciesla <limburgher@gmail.com> – 0.16.2-1
– 0.16.2, BZ 1222258.
* Thu May 14 2015 Jon Ciesla <limburgher@gmail.com> – 0.16.1-7
– Add provides for bundled dcraw, https://fedorahosted.org/fpc/ticket/530
– Fix EVR in changelog.
* Mon May 11 2015 Jon Ciesla <limburgher@gmail.com> – 0.16.1-6
– 0.16.1, BZ 1220382.
* Sat May 2 2015 Kalev Lember <kalevlember@gmail.com> – 0.16.0-5
– Rebuilt for GCC 5 C++11 ABI change
——————————————————————————–
References:
[ 1 ] Bug #1222258 – LibRaw-0.16.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1222258
[ 2 ] Bug #1220382 – LibRaw-0.16.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1220382
[ 3 ] Bug #1221250 – CVE-2015-3885 LibRaw: dcraw: input sanitization flaw leading to buffer overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1221250
——————————————————————————–
This update can be installed with the “yum” update program. Use
su -c ‘yum update LibRaw’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
