From 09a466b1ac3b8576fcce5a9742151cd15db2f67b6608d6c28499ae49785f1992 Mon Sep 17 00:00:00 2001 From: Petr Gajdos Date: Fri, 15 Sep 2017 16:26:49 +0000 Subject: [PATCH] * Fix for possible heap overrun in Canon makernotes parser (CVE-2017-14348) - add libraw-out-of-bounds-kodak.patch, upstream bug #101 OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=99 --- libraw.changes | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/libraw.changes b/libraw.changes index 6c6bb3a..0e96289 100644 --- a/libraw.changes +++ b/libraw.changes @@ -2,10 +2,11 @@ Wed Sep 13 10:25:35 UTC 2017 - pgajdos@suse.com - updated to 0.18.4: - * Fix for possible heap overrun in Canon makernotes parser + * Fix for possible heap overrun in Canon makernotes parser + (CVE-2017-14348) * Fix for CVE-2017-13735 * CVE-2017-14265: Additional check for X-Trans CFA pattern data -- add libraw-CVE-2017-14348.patch [bsc#1058467] +- add libraw-out-of-bounds-kodak.patch, upstream bug #101 - remove libraw-CVE-2017-6887,6886.patch and libraw-CVE-2017-6890,6899.patch: no need to patch dcraw.c, it is not used