Mageia alert MGASA-2013-0223 (darktable)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2013-0223: Updated darktable package fixes
 security vulnerability 
Date:
    	     
 
Sun, 21 Jul 2013 11:04:48 +0200
Message-ID:
    	     
 
<20130721090448.AC11341D6F@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2013-0223 - Updated darktable package fixes security vulnerability

Publication date: 21 Jul 2013
URL: http://advisories.mageia.org/MGASA-2013-0223.html
Type: security
Affected Mageia releases: 3
CVE: CVE-2013-2126

Description:
A double-free error exits when handling damaged full-color within Foveon and
sRAW files in libraw, which is embedded in darktable (CVE-2013-2126).

References:
- https://bugs.mageia.org/show_bug.cgi?id=10427
- http://secunia.com/advisories/53547/
- http://www.libraw.org/news/libraw-0-15-2
- http://lists.opensuse.org/opensuse-updates/2013-06/msg001...
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126

SRPMS:
- 3/core/darktable-1.2-1.1.mga3