[CLSA-2026:1785408515] LibRaw: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-30 10:48:48 UTC
Description:
- CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964: fix out-of-bounds reads in the Phase One / Fujifilm metadata decoders (phase_one_correct / fuji 0xf00c); backport upstream 0.21.4 fixes
CVEs fixed:
Updated packages:
  • LibRaw-0.20.2-5.el9_2.tuxcare.els6.i686.rpm
    sha:3e18f79cf5429e76daf231804be6e591187f88f628cc052de628becd45e79c4d
  • LibRaw-0.20.2-5.el9_2.tuxcare.els6.x86_64.rpm
    sha:dcada86ee2ae20bc69d3da63c3ed8df1083999a32fa51b673e692d58e70ef8b9
  • LibRaw-devel-0.20.2-5.el9_2.tuxcare.els6.i686.rpm
    sha:b18b720e3cec62a4134f72e4563c232e6c977fca92b0659e3232becdb4b0a5d3
  • LibRaw-devel-0.20.2-5.el9_2.tuxcare.els6.x86_64.rpm
    sha:ad2992c4c3dced0af245fa721518e610661c5960a2d02e640e28068dcf909754
  • LibRaw-samples-0.20.2-5.el9_2.tuxcare.els6.x86_64.rpm
    sha:c24de5cac68fe25f8eacc049e57f05c387a2ca7130be6434a959f3c8f9b9516d
  • LibRaw-static-0.20.2-5.el9_2.tuxcare.els6.x86_64.rpm
    sha:7f84a9d85aaa94fb7c373c922a78d8b90fde33449e0dc312c29692ea6157708b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.