Release date:
2026-07-06 14:36:09 UTC
Description:
- CVE-2026-24660: X3F decoder heap buffer overflow via 32-bit size arithmetic
in x3f_load_huffman/x3f_load_true; add LIBRAW_X3F_ALLOC_LIMIT_MB cap and
convert size math to 64-bit (ELSCVE-135086)
Updated packages:
-
LibRaw-0.20.2-5.el9_2.tuxcare.els5.i686.rpm
sha:63532cd18407fd607ce31856630018a9847e7b132b3494f623df04779358bafb
-
LibRaw-0.20.2-5.el9_2.tuxcare.els5.x86_64.rpm
sha:17439a8aae13df87cf8042d3c43ce4de3ce35ec213a4d37f19d133a671a33da0
-
LibRaw-devel-0.20.2-5.el9_2.tuxcare.els5.i686.rpm
sha:f05b9a13f3a5843d7f27c9a5519bfd43eebe185b711f3704164a28db58e15cad
-
LibRaw-devel-0.20.2-5.el9_2.tuxcare.els5.x86_64.rpm
sha:409edc92d3ceeb8fb4c88c4ce7807ccef66790c3660de03b7898e7d19874bf63
-
LibRaw-samples-0.20.2-5.el9_2.tuxcare.els5.x86_64.rpm
sha:1c8dec69600d473635bfe1fdbc665e13b6bf19d581170a8f48c0aff09b782098
-
LibRaw-static-0.20.2-5.el9_2.tuxcare.els5.x86_64.rpm
sha:25e83a8a3ee1c78d15c1399381f4822786a734434b12f994b105a4208f4b824b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.