LibRaw: Multiple vulnerabilities Multiple vulnerabilities have been found in LibRaw, the worst of which may allow attackers to execute arbitrary code. libraw 2017-01-24 2017-04-30 549338 567254 local, remote 0.17.1 0.17.1

LibRaw is a library for reading RAW files obtained from digital photo cameras.

Multiple vulnerabilities have been discovered in LibRaw. Please review the CVE identifiers referenced below for details.

An attacker could execute arbitrary code, cause a Denial of Service condition, or have other unspecified impacts.

There is no known workaround at this time.

All LibRaw users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libraw-0.17.1"
CVE-2015-3885 CVE-2015-8366 CVE-2015-8367 b-man b-man