ELSA-2026-13284

Опубликовано: 05 мая 2026

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2026-13284: LibRaw security update (IMPORTANT)

[0.19.5-6]

Backport fix for CVE-2026-24660 from upstream Resolves: RHEL-165412

[0.19.5-5]

Backport fixes for CVE-2026-20889 and CVE-2026-21413 from upstream
Migrate to SPDX license Resolves: RHEL-165404, RHEL-165408

Обновленные пакеты

Oracle Linux 8

Oracle Linux x86_64

LibRaw

0.19.5-6.el8_10

LibRaw-devel

0.19.5-6.el8_10

Связанные CVE

CVE-2026-20889

CVE-2026-21413

CVE-2026-24660

Ссылки на источники

Связанные уязвимости

RLSA-2026:13284

rocky

3 месяца назад

Important: LibRaw security update

SUSE-SU-2026:1556-1

suse-cvrf

3 месяца назад

Security update for libraw

openSUSE-SU-2026:20574-1

suse-cvrf

3 месяца назад

Security update for libraw

SUSE-SU-2026:1555-1

suse-cvrf

3 месяца назад

Security update for libraw

CVE-2026-20889

CVSS3: 9.8

ubuntu

4 месяца назад

A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.