Bug 28162

Summary:	ufraw update to bundled dcraw code
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	David GEIGER <geiger.david68210>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	ufraw-0.22-17.mga8.src.rpm	CVE:
Status comment:

Description David Walser 2021-01-18 17:48:26 CET

Fedora has issued an advisory today (January 18):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6JWWFGYQ3TPLXJZURXVSHGIGUMGDVZV5/

The bundled dcraw code is updated to 9.28 to include the latest fixes (including security bugs) from there.

The update was in this commit:
https://src.fedoraproject.org/rpms/ufraw/c/7f1623ebd61f2ece75441243e3af04f4e9970a98?branch=master

Comment 1 David Walser 2021-01-18 19:28:18 CET

Fixed by David Geiger in ufraw-0.22-18.mga8.

Resolution: (none) => FIXED
Assignee: bugsquad => geiger.david68210
Status: NEW => RESOLVED