CVE request: libraw: multiple issues

[Raphael Geissert <geissert () debian org>]

Hi,

> From [1]:
> LibRaw 0.15.1 (26-05-2013)
This should be 0.15.2
> Fixed possible double-free() on error recovery on damaged full-color (Foveon, sRAW) files.
> wchar_t* file interface disabled for MinGW32 compilation
>
> LibRaw 0.15.1 (24-05-2013)
>
> fixed wrong data maximum calculation for Panasonic files
> check for possible buffer overrun in exposure correction code

So there's a double-free (fixed in 0.15.2[3]) and a buffer overflow
(fixed in 0.15.1[2]).

Could CVE ids be assigned please?

References:
[1]http://www.libraw.org/download
[2]http://www.libraw.org/news/libraw-0-15-1
[3]http://www.libraw.org/news/libraw-0-15-2
http://secunia.com/advisories/53547/

Cheers,
--
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net