Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-1729 (GCVE-0-2023-1729)
Vulnerability from cvelistv5
- CWE-119 - ->CWE-787
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T05:57:24.974Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://github.com/LibRaw/LibRaw/issues/557" }, { "tags": [ "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "name": "FEDORA-2023-b19f236bc7", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/" }, { "name": "FEDORA-2023-88c87f6191", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/" }, { "name": "[debian-lts-announce] 20230527 [SECURITY] [DLA 3433-1] libraw security update", "tags": [ "mailing-list", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html" }, { "name": "DSA-5412", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.debian.org/security/2023/dsa-5412" }, { "name": "GLSA-202312-08", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://security.gentoo.org/glsa/202312-08" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "LibRaw", "vendor": "n/a", "versions": [ { "status": "affected", "version": "LibRaw 0.21.1" } ] } ], "descriptions": [ { "lang": "en", "value": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash." } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-119", "description": "CWE-119-\u003eCWE-787", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2023-12-22T13:06:23.193897", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "url": "https://github.com/LibRaw/LibRaw/issues/557" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "name": "FEDORA-2023-b19f236bc7", "tags": [ "vendor-advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/" }, { "name": "FEDORA-2023-88c87f6191", "tags": [ "vendor-advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/" }, { "name": "[debian-lts-announce] 20230527 [SECURITY] [DLA 3433-1] libraw security update", "tags": [ "mailing-list" ], "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html" }, { "name": "DSA-5412", "tags": [ "vendor-advisory" ], "url": "https://www.debian.org/security/2023/dsa-5412" }, { "name": "GLSA-202312-08", "tags": [ "vendor-advisory" ], "url": "https://security.gentoo.org/glsa/202312-08" } ] } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2023-1729", "datePublished": "2023-05-15T00:00:00", "dateReserved": "2023-03-30T00:00:00", "dateUpdated": "2024-08-02T05:57:24.974Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-1729\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2023-05-15T22:15:10.350\",\"lastModified\":\"2025-03-20T17:01:00.757\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.21.2\",\"matchCriteriaId\":\"0218F3FC-B5F8-4B58-AB04-834FAA1BED12\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"}]}]}],\"references\":[{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2188240\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/LibRaw/LibRaw/issues/557\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-08\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5412\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2188240\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/LibRaw/LibRaw/issues/557\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-08\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5412\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
wid-sec-w-2024-0995
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Red Hat Enterprise Linux (RHEL) ist eine popul\u00e4re Linux-Distribution.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder seine Privilegien zu erweitern.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0995 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0995.json" }, { "category": "self", "summary": "WID-SEC-2024-0995 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0995" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2137" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2147" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2295" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2337" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2366" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2396" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2512" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2199" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2204" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2438" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3105 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3105" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3120 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3120" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3044 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3044" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3139 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3139" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3163 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3163" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3008 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3008" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-3044 vom 2024-05-28", "url": "https://linux.oracle.com/errata/ELSA-2024-3044.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0136-2 vom 2024-07-09", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018909.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2375-1 vom 2024-07-09", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018915.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202409-06 vom 2024-09-22", "url": "https://security.gentoo.org/glsa/202409-06" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10965 vom 2024-12-11", "url": "https://access.redhat.com/errata/RHSA-2024:10965" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-11250 vom 2024-12-19", "url": "https://linux.oracle.com/errata/ELSA-2024-11250.html" }, { "category": "external", "summary": "Ubuntu Security Notice USN-7266-1 vom 2025-02-13", "url": "https://ubuntu.com/security/notices/USN-7266-1" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13098 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13098" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13100 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13100" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13101 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13101" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13103 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13103" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13104 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13104" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13102 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13102" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:14553 vom 2025-08-26", "url": "https://access.redhat.com/errata/RHSA-2025:14553" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2025-14553 vom 2025-08-26", "url": "https://linux.oracle.com/errata/ELSA-2025-14553.html" } ], "source_lang": "en-US", "title": "Red Hat Enterprise Linux: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-08-26T22:00:00.000+00:00", "generator": { "date": "2025-08-27T11:46:25.466+00:00", "engine": { "name": "BSI-WID", "version": "1.4.0" } }, "id": "WID-SEC-W-2024-0995", "initial_release_date": "2024-04-29T22:00:00.000+00:00", "revision_history": [ { "date": "2024-04-29T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-05-21T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-05-28T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-07-09T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-09-22T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-12-11T23:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-19T23:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2025-02-12T23:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2025-08-05T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2025-08-25T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2025-08-26T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Oracle Linux aufgenommen" } ], "status": "final", "version": "11" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Gentoo Linux", "product": { "name": "Gentoo Linux", "product_id": "T012167", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } }, { "category": "product_version", "name": "9", "product": { "name": "Red Hat Enterprise Linux 9", "product_id": "T034465", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } }, { "category": "product_version", "name": "8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "T034466", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } }, { "category": "product_version", "name": "7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "T034467", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_name", "name": "Enterprise Linux" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-29390", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2021-29390" }, { "cve": "CVE-2022-48554", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2022-48554" }, { "cve": "CVE-2023-1729", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-1729" }, { "cve": "CVE-2023-49083", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-49083" }, { "cve": "CVE-2023-5215", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-5215" }, { "cve": "CVE-2023-5871", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-5871" }, { "cve": "CVE-2024-1481", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2024-1481" }, { "cve": "CVE-2024-22365", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2024-22365" }, { "cve": "CVE-2024-24258", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2024-24258" }, { "cve": "CVE-2024-24259", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2024-24259" }, { "cve": "CVE-2021-40153", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2021-40153" }, { "cve": "CVE-2021-41072", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2021-41072" }, { "cve": "CVE-2023-41915", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-41915" } ] }
WID-SEC-W-2024-0995
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Red Hat Enterprise Linux (RHEL) ist eine popul\u00e4re Linux-Distribution.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder seine Privilegien zu erweitern.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0995 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0995.json" }, { "category": "self", "summary": "WID-SEC-2024-0995 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0995" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2137" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2147" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2295" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2337" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2366" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2396" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2512" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2199" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2204" }, { "category": "external", "summary": "Red Hat Security Advisory vom 2024-04-29", "url": "https://access.redhat.com/errata/RHSA-2024:2438" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3105 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3105" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3120 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3120" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3044 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3044" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3139 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3139" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3163 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3163" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:3008 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:3008" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-3044 vom 2024-05-28", "url": "https://linux.oracle.com/errata/ELSA-2024-3044.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0136-2 vom 2024-07-09", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018909.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2375-1 vom 2024-07-09", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018915.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202409-06 vom 2024-09-22", "url": "https://security.gentoo.org/glsa/202409-06" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10965 vom 2024-12-11", "url": "https://access.redhat.com/errata/RHSA-2024:10965" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-11250 vom 2024-12-19", "url": "https://linux.oracle.com/errata/ELSA-2024-11250.html" }, { "category": "external", "summary": "Ubuntu Security Notice USN-7266-1 vom 2025-02-13", "url": "https://ubuntu.com/security/notices/USN-7266-1" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13098 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13098" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13100 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13100" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13101 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13101" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13103 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13103" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13104 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13104" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:13102 vom 2025-08-06", "url": "https://access.redhat.com/errata/RHSA-2025:13102" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:14553 vom 2025-08-26", "url": "https://access.redhat.com/errata/RHSA-2025:14553" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2025-14553 vom 2025-08-26", "url": "https://linux.oracle.com/errata/ELSA-2025-14553.html" } ], "source_lang": "en-US", "title": "Red Hat Enterprise Linux: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-08-26T22:00:00.000+00:00", "generator": { "date": "2025-08-27T11:46:25.466+00:00", "engine": { "name": "BSI-WID", "version": "1.4.0" } }, "id": "WID-SEC-W-2024-0995", "initial_release_date": "2024-04-29T22:00:00.000+00:00", "revision_history": [ { "date": "2024-04-29T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-05-21T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-05-28T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-07-09T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-09-22T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-12-11T23:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-19T23:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2025-02-12T23:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2025-08-05T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2025-08-25T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2025-08-26T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Oracle Linux aufgenommen" } ], "status": "final", "version": "11" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Gentoo Linux", "product": { "name": "Gentoo Linux", "product_id": "T012167", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } }, { "category": "product_version", "name": "9", "product": { "name": "Red Hat Enterprise Linux 9", "product_id": "T034465", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } }, { "category": "product_version", "name": "8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "T034466", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } }, { "category": "product_version", "name": "7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "T034467", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_name", "name": "Enterprise Linux" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-29390", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2021-29390" }, { "cve": "CVE-2022-48554", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2022-48554" }, { "cve": "CVE-2023-1729", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-1729" }, { "cve": "CVE-2023-49083", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-49083" }, { "cve": "CVE-2023-5215", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-5215" }, { "cve": "CVE-2023-5871", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-5871" }, { "cve": "CVE-2024-1481", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2024-1481" }, { "cve": "CVE-2024-22365", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2024-22365" }, { "cve": "CVE-2024-24258", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2024-24258" }, { "cve": "CVE-2024-24259", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2024-24259" }, { "cve": "CVE-2021-40153", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2021-40153" }, { "cve": "CVE-2021-41072", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2021-41072" }, { "cve": "CVE-2023-41915", "product_status": { "known_affected": [ "T034467", "T002207", "67646", "T000126", "T012167", "T004914", "T034466", "T034465" ] }, "release_date": "2024-04-29T22:00:00.000+00:00", "title": "CVE-2023-41915" } ] }
gsd-2023-1729
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2023-1729", "id": "GSD-2023-1729" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2023-1729" ], "details": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "id": "GSD-2023-1729", "modified": "2023-12-13T01:20:41.643675Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2023-1729", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "LibRaw", "version": { "version_data": [ { "version_value": "LibRaw 0.21.1" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-119-\u003eCWE-787" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/LibRaw/LibRaw/issues/557", "refsource": "MISC", "url": "https://github.com/LibRaw/LibRaw/issues/557" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "name": "FEDORA-2023-b19f236bc7", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/" }, { "name": "FEDORA-2023-88c87f6191", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/" }, { "name": "[debian-lts-announce] 20230527 [SECURITY] [DLA 3433-1] libraw security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html" }, { "name": "DSA-5412", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2023/dsa-5412" }, { "name": "GLSA-202312-08", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202312-08" } ] } }, "gitlab.com": { "advisories": [ { "affected_range": "\u003c2023-01-14", "affected_versions": "All versions before 2023-01-14", "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "cwe_ids": [ "CWE-1035", "CWE-787", "CWE-937" ], "date": "2023-05-28", "description": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "fixed_versions": [], "identifier": "CVE-2023-1729", "identifiers": [ "CVE-2023-1729" ], "not_impacted": "", "package_slug": "conan/libraw", "pubdate": "2023-05-15", "solution": "Unfortunately, there is no solution available yet.", "title": "Out-of-bounds Write", "urls": [ "https://nvd.nist.gov/vuln/detail/CVE-2023-1729", "https://bugzilla.redhat.com/show_bug.cgi?id=2188240", "https://github.com/LibRaw/LibRaw/issues/557", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/" ], "uuid": "3ebedd2d-5cb9-4bc8-b88d-6ef8914c7d5a" } ] }, "nvd.nist.gov": { "cve": { "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*", "matchCriteriaId": "87AF9485-5698-410D-96B7-591934CD978B", "versionEndExcluding": "2023-01-14", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*", "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D", "vulnerable": true }, { "criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*", "matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "descriptions": [ { "lang": "en", "value": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash." } ], "id": "CVE-2023-1729", "lastModified": "2023-12-22T13:15:08.680", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2023-05-15T22:15:10.350", "references": [ { "source": "secalert@redhat.com", "tags": [ "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "source": "secalert@redhat.com", "tags": [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://github.com/LibRaw/LibRaw/issues/557" }, { "source": "secalert@redhat.com", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html" }, { "source": "secalert@redhat.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/" }, { "source": "secalert@redhat.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/" }, { "source": "secalert@redhat.com", "url": "https://security.gentoo.org/glsa/202312-08" }, { "source": "secalert@redhat.com", "url": "https://www.debian.org/security/2023/dsa-5412" } ], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" }, { "description": [ { "lang": "en", "value": "CWE-119" } ], "source": "secalert@redhat.com", "type": "Secondary" } ] } } } }
suse-su-2023:2194-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for libraw", "title": "Title of the patch" }, { "category": "description", "text": "This update for libraw fixes the following issues:\n\n- CVE-2023-1729: Fixed a heap buffer overflow when converting an\n image (bsc#1210720).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2023-2194,SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-2194,SUSE-SLE-Product-WE-15-SP4-2023-2194,openSUSE-SLE-15.4-2023-2194", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_2194-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2023:2194-1", "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20232194-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2023:2194-1", "url": "https://lists.suse.com/pipermail/sle-updates/2023-May/029408.html" }, { "category": "self", "summary": "SUSE Bug 1210720", "url": "https://bugzilla.suse.com/1210720" }, { "category": "self", "summary": "SUSE CVE CVE-2023-1729 page", "url": "https://www.suse.com/security/cve/CVE-2023-1729/" } ], "title": "Security update for libraw", "tracking": { "current_release_date": "2023-05-15T08:59:22Z", "generator": { "date": "2023-05-15T08:59:22Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2023:2194-1", "initial_release_date": "2023-05-15T08:59:22Z", "revision_history": [ { "date": "2023-05-15T08:59:22Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libraw-devel-0.20.2-150400.3.6.1.aarch64", "product": { "name": "libraw-devel-0.20.2-150400.3.6.1.aarch64", "product_id": "libraw-devel-0.20.2-150400.3.6.1.aarch64" } }, { "category": "product_version", "name": "libraw-devel-static-0.20.2-150400.3.6.1.aarch64", "product": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.aarch64", "product_id": "libraw-devel-static-0.20.2-150400.3.6.1.aarch64" } }, { "category": "product_version", "name": "libraw-tools-0.20.2-150400.3.6.1.aarch64", "product": { "name": "libraw-tools-0.20.2-150400.3.6.1.aarch64", "product_id": "libraw-tools-0.20.2-150400.3.6.1.aarch64" } }, { "category": "product_version", "name": "libraw20-0.20.2-150400.3.6.1.aarch64", "product": { "name": "libraw20-0.20.2-150400.3.6.1.aarch64", "product_id": "libraw20-0.20.2-150400.3.6.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libraw20-64bit-0.20.2-150400.3.6.1.aarch64_ilp32", "product": { "name": "libraw20-64bit-0.20.2-150400.3.6.1.aarch64_ilp32", "product_id": "libraw20-64bit-0.20.2-150400.3.6.1.aarch64_ilp32" } } ], "category": "architecture", "name": "aarch64_ilp32" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.20.2-150400.3.6.1.i586", "product": { "name": "libraw-devel-0.20.2-150400.3.6.1.i586", "product_id": "libraw-devel-0.20.2-150400.3.6.1.i586" } }, { "category": "product_version", "name": "libraw-devel-static-0.20.2-150400.3.6.1.i586", "product": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.i586", "product_id": "libraw-devel-static-0.20.2-150400.3.6.1.i586" } }, { "category": "product_version", "name": "libraw-tools-0.20.2-150400.3.6.1.i586", "product": { "name": "libraw-tools-0.20.2-150400.3.6.1.i586", "product_id": "libraw-tools-0.20.2-150400.3.6.1.i586" } }, { "category": "product_version", "name": "libraw20-0.20.2-150400.3.6.1.i586", "product": { "name": "libraw20-0.20.2-150400.3.6.1.i586", "product_id": "libraw20-0.20.2-150400.3.6.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.20.2-150400.3.6.1.ppc64le", "product": { "name": "libraw-devel-0.20.2-150400.3.6.1.ppc64le", "product_id": "libraw-devel-0.20.2-150400.3.6.1.ppc64le" } }, { "category": "product_version", "name": "libraw-devel-static-0.20.2-150400.3.6.1.ppc64le", "product": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.ppc64le", "product_id": "libraw-devel-static-0.20.2-150400.3.6.1.ppc64le" } }, { "category": "product_version", "name": "libraw-tools-0.20.2-150400.3.6.1.ppc64le", "product": { "name": "libraw-tools-0.20.2-150400.3.6.1.ppc64le", "product_id": "libraw-tools-0.20.2-150400.3.6.1.ppc64le" } }, { "category": "product_version", "name": "libraw20-0.20.2-150400.3.6.1.ppc64le", "product": { "name": "libraw20-0.20.2-150400.3.6.1.ppc64le", "product_id": "libraw20-0.20.2-150400.3.6.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.20.2-150400.3.6.1.s390x", "product": { "name": "libraw-devel-0.20.2-150400.3.6.1.s390x", "product_id": "libraw-devel-0.20.2-150400.3.6.1.s390x" } }, { "category": "product_version", "name": "libraw-devel-static-0.20.2-150400.3.6.1.s390x", "product": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.s390x", "product_id": "libraw-devel-static-0.20.2-150400.3.6.1.s390x" } }, { "category": "product_version", "name": "libraw-tools-0.20.2-150400.3.6.1.s390x", "product": { "name": "libraw-tools-0.20.2-150400.3.6.1.s390x", "product_id": "libraw-tools-0.20.2-150400.3.6.1.s390x" } }, { "category": "product_version", "name": "libraw20-0.20.2-150400.3.6.1.s390x", "product": { "name": "libraw20-0.20.2-150400.3.6.1.s390x", "product_id": "libraw20-0.20.2-150400.3.6.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.20.2-150400.3.6.1.x86_64", "product": { "name": "libraw-devel-0.20.2-150400.3.6.1.x86_64", "product_id": "libraw-devel-0.20.2-150400.3.6.1.x86_64" } }, { "category": "product_version", "name": "libraw-devel-static-0.20.2-150400.3.6.1.x86_64", "product": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.x86_64", "product_id": "libraw-devel-static-0.20.2-150400.3.6.1.x86_64" } }, { "category": "product_version", "name": "libraw-tools-0.20.2-150400.3.6.1.x86_64", "product": { "name": "libraw-tools-0.20.2-150400.3.6.1.x86_64", "product_id": "libraw-tools-0.20.2-150400.3.6.1.x86_64" } }, { "category": "product_version", "name": "libraw20-0.20.2-150400.3.6.1.x86_64", "product": { "name": "libraw20-0.20.2-150400.3.6.1.x86_64", "product_id": "libraw20-0.20.2-150400.3.6.1.x86_64" } }, { "category": "product_version", "name": "libraw20-32bit-0.20.2-150400.3.6.1.x86_64", "product": { "name": "libraw20-32bit-0.20.2-150400.3.6.1.x86_64", "product_id": "libraw20-32bit-0.20.2-150400.3.6.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4", "product": { "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Workstation Extension 15 SP4", "product": { "name": "SUSE Linux Enterprise Workstation Extension 15 SP4", "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-we:15:sp4" } } }, { "category": "product_name", "name": "openSUSE Leap 15.4", "product": { "name": "openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.4" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libraw20-0.20.2-150400.3.6.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.aarch64" }, "product_reference": "libraw20-0.20.2-150400.3.6.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw20-0.20.2-150400.3.6.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.ppc64le" }, "product_reference": "libraw20-0.20.2-150400.3.6.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw20-0.20.2-150400.3.6.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.s390x" }, "product_reference": "libraw20-0.20.2-150400.3.6.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw20-0.20.2-150400.3.6.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.x86_64" }, "product_reference": "libraw20-0.20.2-150400.3.6.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.20.2-150400.3.6.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4", "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4:libraw-devel-0.20.2-150400.3.6.1.x86_64" }, "product_reference": "libraw-devel-0.20.2-150400.3.6.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.20.2-150400.3.6.1.aarch64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.aarch64" }, "product_reference": "libraw-devel-0.20.2-150400.3.6.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.20.2-150400.3.6.1.ppc64le as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.ppc64le" }, "product_reference": "libraw-devel-0.20.2-150400.3.6.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.20.2-150400.3.6.1.s390x as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.s390x" }, "product_reference": "libraw-devel-0.20.2-150400.3.6.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.20.2-150400.3.6.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.x86_64" }, "product_reference": "libraw-devel-0.20.2-150400.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.aarch64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.aarch64" }, "product_reference": "libraw-devel-static-0.20.2-150400.3.6.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.ppc64le as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.ppc64le" }, "product_reference": "libraw-devel-static-0.20.2-150400.3.6.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.s390x as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.s390x" }, "product_reference": "libraw-devel-static-0.20.2-150400.3.6.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.20.2-150400.3.6.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.x86_64" }, "product_reference": "libraw-devel-static-0.20.2-150400.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-tools-0.20.2-150400.3.6.1.aarch64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.aarch64" }, "product_reference": "libraw-tools-0.20.2-150400.3.6.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-tools-0.20.2-150400.3.6.1.ppc64le as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.ppc64le" }, "product_reference": "libraw-tools-0.20.2-150400.3.6.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-tools-0.20.2-150400.3.6.1.s390x as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.s390x" }, "product_reference": "libraw-tools-0.20.2-150400.3.6.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-tools-0.20.2-150400.3.6.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.x86_64" }, "product_reference": "libraw-tools-0.20.2-150400.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw20-0.20.2-150400.3.6.1.aarch64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.aarch64" }, "product_reference": "libraw20-0.20.2-150400.3.6.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw20-0.20.2-150400.3.6.1.ppc64le as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.ppc64le" }, "product_reference": "libraw20-0.20.2-150400.3.6.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw20-0.20.2-150400.3.6.1.s390x as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.s390x" }, "product_reference": "libraw20-0.20.2-150400.3.6.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw20-0.20.2-150400.3.6.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.x86_64" }, "product_reference": "libraw20-0.20.2-150400.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw20-32bit-0.20.2-150400.3.6.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw20-32bit-0.20.2-150400.3.6.1.x86_64" }, "product_reference": "libraw20-32bit-0.20.2-150400.3.6.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-1729", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-1729" } ], "notes": [ { "category": "general", "text": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.x86_64", "SUSE Linux Enterprise Workstation Extension 15 SP4:libraw-devel-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw20-32bit-0.20.2-150400.3.6.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-1729", "url": "https://www.suse.com/security/cve/CVE-2023-1729" }, { "category": "external", "summary": "SUSE Bug 1210720 for CVE-2023-1729", "url": "https://bugzilla.suse.com/1210720" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.x86_64", "SUSE Linux Enterprise Workstation Extension 15 SP4:libraw-devel-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw20-32bit-0.20.2-150400.3.6.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.3.6.1.x86_64", "SUSE Linux Enterprise Workstation Extension 15 SP4:libraw-devel-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-devel-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-devel-static-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw-tools-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.aarch64", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.ppc64le", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.s390x", "openSUSE Leap 15.4:libraw20-0.20.2-150400.3.6.1.x86_64", "openSUSE Leap 15.4:libraw20-32bit-0.20.2-150400.3.6.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-05-15T08:59:22Z", "details": "low" } ], "title": "CVE-2023-1729" } ] }
suse-su-2023:2195-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for libraw", "title": "Title of the patch" }, { "category": "description", "text": "This update for libraw fixes the following issues:\n\n- CVE-2023-1729: Fixed a heap buffer overflow when converting an\n image (bsc#1210720).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2023-2195,SUSE-SLE-Product-WE-15-SP4-2023-2195,openSUSE-SLE-15.4-2023-2195", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_2195-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2023:2195-1", "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20232195-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2023:2195-1", "url": "https://lists.suse.com/pipermail/sle-updates/2023-May/029407.html" }, { "category": "self", "summary": "SUSE Bug 1210720", "url": "https://bugzilla.suse.com/1210720" }, { "category": "self", "summary": "SUSE CVE CVE-2023-1729 page", "url": "https://www.suse.com/security/cve/CVE-2023-1729/" } ], "title": "Security update for libraw", "tracking": { "current_release_date": "2023-05-15T08:59:35Z", "generator": { "date": "2023-05-15T08:59:35Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2023:2195-1", "initial_release_date": "2023-05-15T08:59:35Z", "revision_history": [ { "date": "2023-05-15T08:59:35Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libraw-devel-0.18.9-150000.3.20.1.aarch64", "product": { "name": "libraw-devel-0.18.9-150000.3.20.1.aarch64", "product_id": "libraw-devel-0.18.9-150000.3.20.1.aarch64" } }, { "category": "product_version", "name": "libraw-devel-static-0.18.9-150000.3.20.1.aarch64", "product": { "name": "libraw-devel-static-0.18.9-150000.3.20.1.aarch64", "product_id": "libraw-devel-static-0.18.9-150000.3.20.1.aarch64" } }, { "category": "product_version", "name": "libraw-tools-0.18.9-150000.3.20.1.aarch64", "product": { "name": "libraw-tools-0.18.9-150000.3.20.1.aarch64", "product_id": "libraw-tools-0.18.9-150000.3.20.1.aarch64" } }, { "category": "product_version", "name": "libraw16-0.18.9-150000.3.20.1.aarch64", "product": { "name": "libraw16-0.18.9-150000.3.20.1.aarch64", "product_id": "libraw16-0.18.9-150000.3.20.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.18.9-150000.3.20.1.i586", "product": { "name": "libraw-devel-0.18.9-150000.3.20.1.i586", "product_id": "libraw-devel-0.18.9-150000.3.20.1.i586" } }, { "category": "product_version", "name": "libraw-devel-static-0.18.9-150000.3.20.1.i586", "product": { "name": "libraw-devel-static-0.18.9-150000.3.20.1.i586", "product_id": "libraw-devel-static-0.18.9-150000.3.20.1.i586" } }, { "category": "product_version", "name": "libraw-tools-0.18.9-150000.3.20.1.i586", "product": { "name": "libraw-tools-0.18.9-150000.3.20.1.i586", "product_id": "libraw-tools-0.18.9-150000.3.20.1.i586" } }, { "category": "product_version", "name": "libraw16-0.18.9-150000.3.20.1.i586", "product": { "name": "libraw16-0.18.9-150000.3.20.1.i586", "product_id": "libraw16-0.18.9-150000.3.20.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.18.9-150000.3.20.1.ppc64le", "product": { "name": "libraw-devel-0.18.9-150000.3.20.1.ppc64le", "product_id": "libraw-devel-0.18.9-150000.3.20.1.ppc64le" } }, { "category": "product_version", "name": "libraw-devel-static-0.18.9-150000.3.20.1.ppc64le", "product": { "name": "libraw-devel-static-0.18.9-150000.3.20.1.ppc64le", "product_id": "libraw-devel-static-0.18.9-150000.3.20.1.ppc64le" } }, { "category": "product_version", "name": "libraw-tools-0.18.9-150000.3.20.1.ppc64le", "product": { "name": "libraw-tools-0.18.9-150000.3.20.1.ppc64le", "product_id": "libraw-tools-0.18.9-150000.3.20.1.ppc64le" } }, { "category": "product_version", "name": "libraw16-0.18.9-150000.3.20.1.ppc64le", "product": { "name": "libraw16-0.18.9-150000.3.20.1.ppc64le", "product_id": "libraw16-0.18.9-150000.3.20.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.18.9-150000.3.20.1.s390x", "product": { "name": "libraw-devel-0.18.9-150000.3.20.1.s390x", "product_id": "libraw-devel-0.18.9-150000.3.20.1.s390x" } }, { "category": "product_version", "name": "libraw-devel-static-0.18.9-150000.3.20.1.s390x", "product": { "name": "libraw-devel-static-0.18.9-150000.3.20.1.s390x", "product_id": "libraw-devel-static-0.18.9-150000.3.20.1.s390x" } }, { "category": "product_version", "name": "libraw-tools-0.18.9-150000.3.20.1.s390x", "product": { "name": "libraw-tools-0.18.9-150000.3.20.1.s390x", "product_id": "libraw-tools-0.18.9-150000.3.20.1.s390x" } }, { "category": "product_version", "name": "libraw16-0.18.9-150000.3.20.1.s390x", "product": { "name": "libraw16-0.18.9-150000.3.20.1.s390x", "product_id": "libraw16-0.18.9-150000.3.20.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.18.9-150000.3.20.1.x86_64", "product": { "name": "libraw-devel-0.18.9-150000.3.20.1.x86_64", "product_id": "libraw-devel-0.18.9-150000.3.20.1.x86_64" } }, { "category": "product_version", "name": "libraw-devel-static-0.18.9-150000.3.20.1.x86_64", "product": { "name": "libraw-devel-static-0.18.9-150000.3.20.1.x86_64", "product_id": "libraw-devel-static-0.18.9-150000.3.20.1.x86_64" } }, { "category": "product_version", "name": "libraw-tools-0.18.9-150000.3.20.1.x86_64", "product": { "name": "libraw-tools-0.18.9-150000.3.20.1.x86_64", "product_id": "libraw-tools-0.18.9-150000.3.20.1.x86_64" } }, { "category": "product_version", "name": "libraw16-0.18.9-150000.3.20.1.x86_64", "product": { "name": "libraw16-0.18.9-150000.3.20.1.x86_64", "product_id": "libraw16-0.18.9-150000.3.20.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Workstation Extension 15 SP4", "product": { "name": "SUSE Linux Enterprise Workstation Extension 15 SP4", "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-we:15:sp4" } } }, { "category": "product_name", "name": "openSUSE Leap 15.4", "product": { "name": "openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.4" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libraw16-0.18.9-150000.3.20.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4", "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4:libraw16-0.18.9-150000.3.20.1.x86_64" }, "product_reference": "libraw16-0.18.9-150000.3.20.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw16-0.18.9-150000.3.20.1.aarch64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.aarch64" }, "product_reference": "libraw16-0.18.9-150000.3.20.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw16-0.18.9-150000.3.20.1.ppc64le as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.ppc64le" }, "product_reference": "libraw16-0.18.9-150000.3.20.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw16-0.18.9-150000.3.20.1.s390x as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.s390x" }, "product_reference": "libraw16-0.18.9-150000.3.20.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "libraw16-0.18.9-150000.3.20.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.x86_64" }, "product_reference": "libraw16-0.18.9-150000.3.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-1729", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-1729" } ], "notes": [ { "category": "general", "text": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Workstation Extension 15 SP4:libraw16-0.18.9-150000.3.20.1.x86_64", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.aarch64", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.ppc64le", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.s390x", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-1729", "url": "https://www.suse.com/security/cve/CVE-2023-1729" }, { "category": "external", "summary": "SUSE Bug 1210720 for CVE-2023-1729", "url": "https://bugzilla.suse.com/1210720" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Workstation Extension 15 SP4:libraw16-0.18.9-150000.3.20.1.x86_64", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.aarch64", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.ppc64le", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.s390x", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Workstation Extension 15 SP4:libraw16-0.18.9-150000.3.20.1.x86_64", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.aarch64", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.ppc64le", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.s390x", "openSUSE Leap 15.4:libraw16-0.18.9-150000.3.20.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-05-15T08:59:35Z", "details": "low" } ], "title": "CVE-2023-1729" } ] }
suse-su-2023:2196-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for libraw", "title": "Title of the patch" }, { "category": "description", "text": "This update for libraw fixes the following issues:\n\n- CVE-2023-1729: Fixed a heap buffer overflow when converting an\n image (bsc#1210720).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2023-2196,SUSE-SLE-SDK-12-SP5-2023-2196,SUSE-SLE-WE-12-SP5-2023-2196", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_2196-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2023:2196-1", "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20232196-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2023:2196-1", "url": "https://lists.suse.com/pipermail/sle-updates/2023-May/029406.html" }, { "category": "self", "summary": "SUSE Bug 1210720", "url": "https://bugzilla.suse.com/1210720" }, { "category": "self", "summary": "SUSE CVE CVE-2023-1729 page", "url": "https://www.suse.com/security/cve/CVE-2023-1729/" } ], "title": "Security update for libraw", "tracking": { "current_release_date": "2023-05-15T08:59:48Z", "generator": { "date": "2023-05-15T08:59:48Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2023:2196-1", "initial_release_date": "2023-05-15T08:59:48Z", "revision_history": [ { "date": "2023-05-15T08:59:48Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libraw-devel-0.15.4-39.1.aarch64", "product": { "name": "libraw-devel-0.15.4-39.1.aarch64", "product_id": "libraw-devel-0.15.4-39.1.aarch64" } }, { "category": "product_version", "name": "libraw-devel-static-0.15.4-39.1.aarch64", "product": { "name": "libraw-devel-static-0.15.4-39.1.aarch64", "product_id": "libraw-devel-static-0.15.4-39.1.aarch64" } }, { "category": "product_version", "name": "libraw-tools-0.15.4-39.1.aarch64", "product": { "name": "libraw-tools-0.15.4-39.1.aarch64", "product_id": "libraw-tools-0.15.4-39.1.aarch64" } }, { "category": "product_version", "name": "libraw9-0.15.4-39.1.aarch64", "product": { "name": "libraw9-0.15.4-39.1.aarch64", "product_id": "libraw9-0.15.4-39.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.15.4-39.1.i586", "product": { "name": "libraw-devel-0.15.4-39.1.i586", "product_id": "libraw-devel-0.15.4-39.1.i586" } }, { "category": "product_version", "name": "libraw-devel-static-0.15.4-39.1.i586", "product": { "name": "libraw-devel-static-0.15.4-39.1.i586", "product_id": "libraw-devel-static-0.15.4-39.1.i586" } }, { "category": "product_version", "name": "libraw-tools-0.15.4-39.1.i586", "product": { "name": "libraw-tools-0.15.4-39.1.i586", "product_id": "libraw-tools-0.15.4-39.1.i586" } }, { "category": "product_version", "name": "libraw9-0.15.4-39.1.i586", "product": { "name": "libraw9-0.15.4-39.1.i586", "product_id": "libraw9-0.15.4-39.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.15.4-39.1.ppc64le", "product": { "name": "libraw-devel-0.15.4-39.1.ppc64le", "product_id": "libraw-devel-0.15.4-39.1.ppc64le" } }, { "category": "product_version", "name": "libraw-devel-static-0.15.4-39.1.ppc64le", "product": { "name": "libraw-devel-static-0.15.4-39.1.ppc64le", "product_id": "libraw-devel-static-0.15.4-39.1.ppc64le" } }, { "category": "product_version", "name": "libraw-tools-0.15.4-39.1.ppc64le", "product": { "name": "libraw-tools-0.15.4-39.1.ppc64le", "product_id": "libraw-tools-0.15.4-39.1.ppc64le" } }, { "category": "product_version", "name": "libraw9-0.15.4-39.1.ppc64le", "product": { "name": "libraw9-0.15.4-39.1.ppc64le", "product_id": "libraw9-0.15.4-39.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.15.4-39.1.s390", "product": { "name": "libraw-devel-0.15.4-39.1.s390", "product_id": "libraw-devel-0.15.4-39.1.s390" } }, { "category": "product_version", "name": "libraw-devel-static-0.15.4-39.1.s390", "product": { "name": "libraw-devel-static-0.15.4-39.1.s390", "product_id": "libraw-devel-static-0.15.4-39.1.s390" } }, { "category": "product_version", "name": "libraw-tools-0.15.4-39.1.s390", "product": { "name": "libraw-tools-0.15.4-39.1.s390", "product_id": "libraw-tools-0.15.4-39.1.s390" } }, { "category": "product_version", "name": "libraw9-0.15.4-39.1.s390", "product": { "name": "libraw9-0.15.4-39.1.s390", "product_id": "libraw9-0.15.4-39.1.s390" } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.15.4-39.1.s390x", "product": { "name": "libraw-devel-0.15.4-39.1.s390x", "product_id": "libraw-devel-0.15.4-39.1.s390x" } }, { "category": "product_version", "name": "libraw-devel-static-0.15.4-39.1.s390x", "product": { "name": "libraw-devel-static-0.15.4-39.1.s390x", "product_id": "libraw-devel-static-0.15.4-39.1.s390x" } }, { "category": "product_version", "name": "libraw-tools-0.15.4-39.1.s390x", "product": { "name": "libraw-tools-0.15.4-39.1.s390x", "product_id": "libraw-tools-0.15.4-39.1.s390x" } }, { "category": "product_version", "name": "libraw9-0.15.4-39.1.s390x", "product": { "name": "libraw9-0.15.4-39.1.s390x", "product_id": "libraw9-0.15.4-39.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.15.4-39.1.x86_64", "product": { "name": "libraw-devel-0.15.4-39.1.x86_64", "product_id": "libraw-devel-0.15.4-39.1.x86_64" } }, { "category": "product_version", "name": "libraw-devel-static-0.15.4-39.1.x86_64", "product": { "name": "libraw-devel-static-0.15.4-39.1.x86_64", "product_id": "libraw-devel-static-0.15.4-39.1.x86_64" } }, { "category": "product_version", "name": "libraw-tools-0.15.4-39.1.x86_64", "product": { "name": "libraw-tools-0.15.4-39.1.x86_64", "product_id": "libraw-tools-0.15.4-39.1.x86_64" } }, { "category": "product_version", "name": "libraw9-0.15.4-39.1.x86_64", "product": { "name": "libraw9-0.15.4-39.1.x86_64", "product_id": "libraw9-0.15.4-39.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Workstation Extension 12 SP5", "product": { "name": "SUSE Linux Enterprise Workstation Extension 12 SP5", "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-we:12:sp5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.15.4-39.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.aarch64" }, "product_reference": "libraw-devel-0.15.4-39.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.15.4-39.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.ppc64le" }, "product_reference": "libraw-devel-0.15.4-39.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.15.4-39.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.s390x" }, "product_reference": "libraw-devel-0.15.4-39.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.15.4-39.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.x86_64" }, "product_reference": "libraw-devel-0.15.4-39.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.15.4-39.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.aarch64" }, "product_reference": "libraw-devel-static-0.15.4-39.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.15.4-39.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.ppc64le" }, "product_reference": "libraw-devel-static-0.15.4-39.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.15.4-39.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.s390x" }, "product_reference": "libraw-devel-static-0.15.4-39.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.15.4-39.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.x86_64" }, "product_reference": "libraw-devel-static-0.15.4-39.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw9-0.15.4-39.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.aarch64" }, "product_reference": "libraw9-0.15.4-39.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw9-0.15.4-39.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.ppc64le" }, "product_reference": "libraw9-0.15.4-39.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw9-0.15.4-39.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.s390x" }, "product_reference": "libraw9-0.15.4-39.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw9-0.15.4-39.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.x86_64" }, "product_reference": "libraw9-0.15.4-39.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libraw9-0.15.4-39.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP5", "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP5:libraw9-0.15.4-39.1.x86_64" }, "product_reference": "libraw9-0.15.4-39.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP5" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-1729", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-1729" } ], "notes": [ { "category": "general", "text": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP5:libraw9-0.15.4-39.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-1729", "url": "https://www.suse.com/security/cve/CVE-2023-1729" }, { "category": "external", "summary": "SUSE Bug 1210720 for CVE-2023-1729", "url": "https://bugzilla.suse.com/1210720" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP5:libraw9-0.15.4-39.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-39.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP5:libraw9-0.15.4-39.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-05-15T08:59:48Z", "details": "low" } ], "title": "CVE-2023-1729" } ] }
RHSA-2024:2137
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for LibRaw is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).\n\nSecurity Fix(es):\n\n* LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:2137", "url": "https://access.redhat.com/errata/RHSA-2024:2137" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index", "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index" }, { "category": "external", "summary": "2188240", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "category": "external", "summary": "RHEL-768", "url": "https://issues.redhat.com/browse/RHEL-768" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2137.json" } ], "title": "Red Hat Security Advisory: LibRaw security update", "tracking": { "current_release_date": "2025-09-25T13:08:52+00:00", "generator": { "date": "2025-09-25T13:08:52+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.8" } }, "id": "RHSA-2024:2137", "initial_release_date": "2024-04-30T10:29:41+00:00", "revision_history": [ { "date": "2024-04-30T10:29:41+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-04-30T10:29:41+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-25T13:08:52+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux CRB (v. 9)", "product": { "name": "Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686", "product_id": "LibRaw-devel-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-0:0.21.1-1.el9.i686", "product_id": "LibRaw-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.src", "product": { "name": "LibRaw-0:0.21.1-1.el9.src", "product_id": "LibRaw-0:0.21.1-1.el9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=s390x" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src" }, "product_reference": "LibRaw-0:0.21.1-1.el9.src", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.src as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src" }, "product_reference": "LibRaw-0:0.21.1-1.el9.src", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Daisy Chen" ] } ], "cve": "CVE-2023-1729", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188240" } ], "notes": [ { "category": "description", "text": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "title": "Vulnerability description" }, { "category": "summary", "text": "LibRaw: a heap-buffer-overflow in raw2image_ex()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-1729" }, { "category": "external", "summary": "RHBZ#2188240", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-1729", "url": "https://www.cve.org/CVERecord?id=CVE-2023-1729" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-1729", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1729" }, { "category": "external", "summary": "https://github.com/LibRaw/LibRaw/issues/557", "url": "https://github.com/LibRaw/LibRaw/issues/557" } ], "release_date": "2023-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-30T10:29:41+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2137" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "LibRaw: a heap-buffer-overflow in raw2image_ex()" } ] }
rhsa-2024:2137
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for LibRaw is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).\n\nSecurity Fix(es):\n\n* LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:2137", "url": "https://access.redhat.com/errata/RHSA-2024:2137" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index", "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index" }, { "category": "external", "summary": "2188240", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "category": "external", "summary": "RHEL-768", "url": "https://issues.redhat.com/browse/RHEL-768" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2137.json" } ], "title": "Red Hat Security Advisory: LibRaw security update", "tracking": { "current_release_date": "2025-09-25T13:08:52+00:00", "generator": { "date": "2025-09-25T13:08:52+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.8" } }, "id": "RHSA-2024:2137", "initial_release_date": "2024-04-30T10:29:41+00:00", "revision_history": [ { "date": "2024-04-30T10:29:41+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-04-30T10:29:41+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-25T13:08:52+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux CRB (v. 9)", "product": { "name": "Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686", "product_id": "LibRaw-devel-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-0:0.21.1-1.el9.i686", "product_id": "LibRaw-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.src", "product": { "name": "LibRaw-0:0.21.1-1.el9.src", "product_id": "LibRaw-0:0.21.1-1.el9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=s390x" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src" }, "product_reference": "LibRaw-0:0.21.1-1.el9.src", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.src as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src" }, "product_reference": "LibRaw-0:0.21.1-1.el9.src", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Daisy Chen" ] } ], "cve": "CVE-2023-1729", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188240" } ], "notes": [ { "category": "description", "text": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "title": "Vulnerability description" }, { "category": "summary", "text": "LibRaw: a heap-buffer-overflow in raw2image_ex()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-1729" }, { "category": "external", "summary": "RHBZ#2188240", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-1729", "url": "https://www.cve.org/CVERecord?id=CVE-2023-1729" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-1729", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1729" }, { "category": "external", "summary": "https://github.com/LibRaw/LibRaw/issues/557", "url": "https://github.com/LibRaw/LibRaw/issues/557" } ], "release_date": "2023-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-30T10:29:41+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2137" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "LibRaw: a heap-buffer-overflow in raw2image_ex()" } ] }
rhsa-2024_2137
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for LibRaw is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).\n\nSecurity Fix(es):\n\n* LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:2137", "url": "https://access.redhat.com/errata/RHSA-2024:2137" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index", "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index" }, { "category": "external", "summary": "2188240", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "category": "external", "summary": "RHEL-768", "url": "https://issues.redhat.com/browse/RHEL-768" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2137.json" } ], "title": "Red Hat Security Advisory: LibRaw security update", "tracking": { "current_release_date": "2024-11-23T01:27:43+00:00", "generator": { "date": "2024-11-23T01:27:43+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2024:2137", "initial_release_date": "2024-04-30T10:29:41+00:00", "revision_history": [ { "date": "2024-04-30T10:29:41+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-04-30T10:29:41+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-23T01:27:43+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux CRB (v. 9)", "product": { "name": "Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=ppc64le" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.ppc64le", "product": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le", "product_id": "LibRaw-0:0.21.1-1.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686", "product_id": "LibRaw-devel-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=i686" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.i686", "product": { "name": "LibRaw-0:0.21.1-1.el9.i686", "product_id": "LibRaw-0:0.21.1-1.el9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-devel@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=x86_64" } } }, { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.x86_64", "product": { "name": "LibRaw-0:0.21.1-1.el9.x86_64", "product_id": "LibRaw-0:0.21.1-1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.src", "product": { "name": "LibRaw-0:0.21.1-1.el9.src", "product_id": "LibRaw-0:0.21.1-1.el9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=aarch64" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "LibRaw-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debugsource@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-debuginfo@0.21.1-1.el9?arch=s390x" } } }, { "category": "product_version", "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product_id": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/LibRaw-samples-debuginfo@0.21.1-1.el9?arch=s390x" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src" }, "product_reference": "LibRaw-0:0.21.1-1.el9.src", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "AppStream-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.src as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src" }, "product_reference": "LibRaw-0:0.21.1-1.el9.src", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-devel-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-devel-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "relates_to_product_reference": "CRB-9.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)", "product_id": "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" }, "product_reference": "LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "relates_to_product_reference": "CRB-9.4.0.GA" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Daisy Chen" ] } ], "cve": "CVE-2023-1729", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188240" } ], "notes": [ { "category": "description", "text": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "title": "Vulnerability description" }, { "category": "summary", "text": "LibRaw: a heap-buffer-overflow in raw2image_ex()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-1729" }, { "category": "external", "summary": "RHBZ#2188240", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-1729", "url": "https://www.cve.org/CVERecord?id=CVE-2023-1729" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-1729", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1729" }, { "category": "external", "summary": "https://github.com/LibRaw/LibRaw/issues/557", "url": "https://github.com/LibRaw/LibRaw/issues/557" } ], "release_date": "2023-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-30T10:29:41+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2137" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "AppStream-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "AppStream-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.src", "CRB-9.4.0.GA:LibRaw-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debuginfo-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-debugsource-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-devel-0:0.21.1-1.el9.x86_64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.aarch64", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.i686", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.ppc64le", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.s390x", "CRB-9.4.0.GA:LibRaw-samples-debuginfo-0:0.21.1-1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "LibRaw: a heap-buffer-overflow in raw2image_ex()" } ] }
opensuse-su-2024:12901-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "libraw-devel-0.21.1-2.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the libraw-devel-0.21.1-2.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-12901", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12901-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2023-1729 page", "url": "https://www.suse.com/security/cve/CVE-2023-1729/" } ], "title": "libraw-devel-0.21.1-2.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:12901-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libraw-devel-0.21.1-2.1.aarch64", "product": { "name": "libraw-devel-0.21.1-2.1.aarch64", "product_id": "libraw-devel-0.21.1-2.1.aarch64" } }, { "category": "product_version", "name": "libraw-devel-static-0.21.1-2.1.aarch64", "product": { "name": "libraw-devel-static-0.21.1-2.1.aarch64", "product_id": "libraw-devel-static-0.21.1-2.1.aarch64" } }, { "category": "product_version", "name": "libraw-tools-0.21.1-2.1.aarch64", "product": { "name": "libraw-tools-0.21.1-2.1.aarch64", "product_id": "libraw-tools-0.21.1-2.1.aarch64" } }, { "category": "product_version", "name": "libraw23-0.21.1-2.1.aarch64", "product": { "name": "libraw23-0.21.1-2.1.aarch64", "product_id": "libraw23-0.21.1-2.1.aarch64" } }, { "category": "product_version", "name": "libraw23-32bit-0.21.1-2.1.aarch64", "product": { "name": "libraw23-32bit-0.21.1-2.1.aarch64", "product_id": "libraw23-32bit-0.21.1-2.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.21.1-2.1.ppc64le", "product": { "name": "libraw-devel-0.21.1-2.1.ppc64le", "product_id": "libraw-devel-0.21.1-2.1.ppc64le" } }, { "category": "product_version", "name": "libraw-devel-static-0.21.1-2.1.ppc64le", "product": { "name": "libraw-devel-static-0.21.1-2.1.ppc64le", "product_id": "libraw-devel-static-0.21.1-2.1.ppc64le" } }, { "category": "product_version", "name": "libraw-tools-0.21.1-2.1.ppc64le", "product": { "name": "libraw-tools-0.21.1-2.1.ppc64le", "product_id": "libraw-tools-0.21.1-2.1.ppc64le" } }, { "category": "product_version", "name": "libraw23-0.21.1-2.1.ppc64le", "product": { "name": "libraw23-0.21.1-2.1.ppc64le", "product_id": "libraw23-0.21.1-2.1.ppc64le" } }, { "category": "product_version", "name": "libraw23-32bit-0.21.1-2.1.ppc64le", "product": { "name": "libraw23-32bit-0.21.1-2.1.ppc64le", "product_id": "libraw23-32bit-0.21.1-2.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.21.1-2.1.s390x", "product": { "name": "libraw-devel-0.21.1-2.1.s390x", "product_id": "libraw-devel-0.21.1-2.1.s390x" } }, { "category": "product_version", "name": "libraw-devel-static-0.21.1-2.1.s390x", "product": { "name": "libraw-devel-static-0.21.1-2.1.s390x", "product_id": "libraw-devel-static-0.21.1-2.1.s390x" } }, { "category": "product_version", "name": "libraw-tools-0.21.1-2.1.s390x", "product": { "name": "libraw-tools-0.21.1-2.1.s390x", "product_id": "libraw-tools-0.21.1-2.1.s390x" } }, { "category": "product_version", "name": "libraw23-0.21.1-2.1.s390x", "product": { "name": "libraw23-0.21.1-2.1.s390x", "product_id": "libraw23-0.21.1-2.1.s390x" } }, { "category": "product_version", "name": "libraw23-32bit-0.21.1-2.1.s390x", "product": { "name": "libraw23-32bit-0.21.1-2.1.s390x", "product_id": "libraw23-32bit-0.21.1-2.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libraw-devel-0.21.1-2.1.x86_64", "product": { "name": "libraw-devel-0.21.1-2.1.x86_64", "product_id": "libraw-devel-0.21.1-2.1.x86_64" } }, { "category": "product_version", "name": "libraw-devel-static-0.21.1-2.1.x86_64", "product": { "name": "libraw-devel-static-0.21.1-2.1.x86_64", "product_id": "libraw-devel-static-0.21.1-2.1.x86_64" } }, { "category": "product_version", "name": "libraw-tools-0.21.1-2.1.x86_64", "product": { "name": "libraw-tools-0.21.1-2.1.x86_64", "product_id": "libraw-tools-0.21.1-2.1.x86_64" } }, { "category": "product_version", "name": "libraw23-0.21.1-2.1.x86_64", "product": { "name": "libraw23-0.21.1-2.1.x86_64", "product_id": "libraw23-0.21.1-2.1.x86_64" } }, { "category": "product_version", "name": "libraw23-32bit-0.21.1-2.1.x86_64", "product": { "name": "libraw23-32bit-0.21.1-2.1.x86_64", "product_id": "libraw23-32bit-0.21.1-2.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.21.1-2.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.aarch64" }, "product_reference": "libraw-devel-0.21.1-2.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.21.1-2.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.ppc64le" }, "product_reference": "libraw-devel-0.21.1-2.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.21.1-2.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.s390x" }, "product_reference": "libraw-devel-0.21.1-2.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-0.21.1-2.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.x86_64" }, "product_reference": "libraw-devel-0.21.1-2.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.21.1-2.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.aarch64" }, "product_reference": "libraw-devel-static-0.21.1-2.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.21.1-2.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.ppc64le" }, "product_reference": "libraw-devel-static-0.21.1-2.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.21.1-2.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.s390x" }, "product_reference": "libraw-devel-static-0.21.1-2.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-devel-static-0.21.1-2.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.x86_64" }, "product_reference": "libraw-devel-static-0.21.1-2.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-tools-0.21.1-2.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.aarch64" }, "product_reference": "libraw-tools-0.21.1-2.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-tools-0.21.1-2.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.ppc64le" }, "product_reference": "libraw-tools-0.21.1-2.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-tools-0.21.1-2.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.s390x" }, "product_reference": "libraw-tools-0.21.1-2.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw-tools-0.21.1-2.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.x86_64" }, "product_reference": "libraw-tools-0.21.1-2.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw23-0.21.1-2.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw23-0.21.1-2.1.aarch64" }, "product_reference": "libraw23-0.21.1-2.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw23-0.21.1-2.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw23-0.21.1-2.1.ppc64le" }, "product_reference": "libraw23-0.21.1-2.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw23-0.21.1-2.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw23-0.21.1-2.1.s390x" }, "product_reference": "libraw23-0.21.1-2.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw23-0.21.1-2.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw23-0.21.1-2.1.x86_64" }, "product_reference": "libraw23-0.21.1-2.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw23-32bit-0.21.1-2.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.aarch64" }, "product_reference": "libraw23-32bit-0.21.1-2.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw23-32bit-0.21.1-2.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.ppc64le" }, "product_reference": "libraw23-32bit-0.21.1-2.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw23-32bit-0.21.1-2.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.s390x" }, "product_reference": "libraw23-32bit-0.21.1-2.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libraw23-32bit-0.21.1-2.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.x86_64" }, "product_reference": "libraw23-32bit-0.21.1-2.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-1729", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-1729" } ], "notes": [ { "category": "general", "text": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-1729", "url": "https://www.suse.com/security/cve/CVE-2023-1729" }, { "category": "external", "summary": "SUSE Bug 1210720 for CVE-2023-1729", "url": "https://bugzilla.suse.com/1210720" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-devel-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-devel-static-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw-tools-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw23-0.21.1-2.1.x86_64", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.aarch64", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.ppc64le", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.s390x", "openSUSE Tumbleweed:libraw23-32bit-0.21.1-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2023-1729" } ] }
ghsa-5gp6-9w92-5752
Vulnerability from github
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
{ "affected": [], "aliases": [ "CVE-2023-1729" ], "database_specific": { "cwe_ids": [ "CWE-119", "CWE-787" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-05-15T22:15:10Z", "severity": "MODERATE" }, "details": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.", "id": "GHSA-5gp6-9w92-5752", "modified": "2024-07-10T15:30:27Z", "published": "2023-05-16T00:30:16Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1729" }, { "type": "WEB", "url": "https://github.com/LibRaw/LibRaw/issues/557" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/202312-08" }, { "type": "WEB", "url": "https://www.debian.org/security/2023/dsa-5412" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
cnvd-2023-43232
Vulnerability from cnvd
Title: LibRaw缓冲区溢出漏洞(CNVD-2023-43232)
Description:
Libraw是Libraw公司的一个用来处理RAW(CRW/CR2,NEF,RAF,DNG,andothers)格式图片的C++库,支持各种操作系统。
LibRaw存在缓冲区溢出漏洞,该漏洞源于函数raw2image_ex(int) 时在处理不受信任的输入时出现边界错误。远程攻击者可利用该漏洞在系统上执行任意代码或者导致拒绝服务攻击。
Severity: 高
Patch Name: LibRaw缓冲区溢出漏洞(CNVD-2023-43232)的补丁
Patch Description:
Libraw是Libraw公司的一个用来处理RAW(CRW/CR2,NEF,RAF,DNG,andothers)格式图片的C++库,支持各种操作系统。
LibRaw存在缓冲区溢出漏洞,该漏洞源于函数raw2image_ex(int) 时在处理不受信任的输入时出现边界错误。远程攻击者可利用该漏洞在系统上执行任意代码或者导致拒绝服务攻击。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description:
厂商已发布了漏洞修复程序,请及时关注更新: https://github.com/LibRaw/LibRaw/commit/9ab70f6dca19229cb5caad7cc31af4e7501bac93
Reference: https://github.com/LibRaw/LibRaw/issues/557
Name | LibRaw LibRaw <2023-01-14 |
---|
{ "cves": { "cve": { "cveNumber": "CVE-2023-1729", "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-1729" } }, "description": "Libraw\u662fLibraw\u516c\u53f8\u7684\u4e00\u4e2a\u7528\u6765\u5904\u7406RAW(CRW/CR2,NEF,RAF,DNG,andothers)\u683c\u5f0f\u56fe\u7247\u7684C++\u5e93\uff0c\u652f\u6301\u5404\u79cd\u64cd\u4f5c\u7cfb\u7edf\u3002\n\nLibRaw\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u51fd\u6570raw2image_ex(int) \u65f6\u5728\u5904\u7406\u4e0d\u53d7\u4fe1\u4efb\u7684\u8f93\u5165\u65f6\u51fa\u73b0\u8fb9\u754c\u9519\u8bef\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u8005\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002", "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://github.com/LibRaw/LibRaw/commit/9ab70f6dca19229cb5caad7cc31af4e7501bac93", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2023-43232", "openTime": "2023-05-26", "patchDescription": "Libraw\u662fLibraw\u516c\u53f8\u7684\u4e00\u4e2a\u7528\u6765\u5904\u7406RAW(CRW/CR2,NEF,RAF,DNG,andothers)\u683c\u5f0f\u56fe\u7247\u7684C++\u5e93\uff0c\u652f\u6301\u5404\u79cd\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nLibRaw\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u51fd\u6570raw2image_ex(int) \u65f6\u5728\u5904\u7406\u4e0d\u53d7\u4fe1\u4efb\u7684\u8f93\u5165\u65f6\u51fa\u73b0\u8fb9\u754c\u9519\u8bef\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u8005\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "LibRaw\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2023-43232\uff09\u7684\u8865\u4e01", "products": { "product": "LibRaw LibRaw \u003c2023-01-14" }, "referenceLink": "https://github.com/LibRaw/LibRaw/issues/557", "serverity": "\u9ad8", "submitTime": "2023-05-18", "title": "LibRaw\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2023-43232\uff09" }
fkie_cve-2023-1729
Vulnerability from fkie_nvd
Vendor | Product | Version | |
---|---|---|---|
libraw | libraw | * | |
fedoraproject | fedora | 37 | |
fedoraproject | fedora | 38 | |
redhat | enterprise_linux | 7.0 | |
redhat | enterprise_linux | 8.0 | |
redhat | enterprise_linux | 9.0 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*", "matchCriteriaId": "0218F3FC-B5F8-4B58-AB04-834FAA1BED12", "versionEndExcluding": "0.21.2", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*", "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D", "vulnerable": true }, { "criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*", "matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash." } ], "id": "CVE-2023-1729", "lastModified": "2025-03-20T17:01:00.757", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2023-05-15T22:15:10.350", "references": [ { "source": "secalert@redhat.com", "tags": [ "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "source": "secalert@redhat.com", "tags": [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://github.com/LibRaw/LibRaw/issues/557" }, { "source": "secalert@redhat.com", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html" }, { "source": "secalert@redhat.com", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/" }, { "source": "secalert@redhat.com", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/" }, { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202312-08" }, { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2023/dsa-5412" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188240" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://github.com/LibRaw/LibRaw/issues/557" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00025.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202312-08" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2023/dsa-5412" } ], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-119" } ], "source": "secalert@redhat.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.