[CLSA-2026:1785317741] LibRaw: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-29 09:35:54 UTC
Description:
- CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964: fix out-of-bounds reads in the Phase One / Fujifilm metadata decoders (phase_one_correct / fuji 0xf00c); backport upstream 0.21.4 fixes
CVEs fixed:
Updated packages:
  • LibRaw-0.21.1-1.el9.tuxcare.els3.i686.rpm
    sha:55a9ebf0bfb9046a162c09424883062e6ded6e1adcd510f5c059fbecd7bf4ca1
  • LibRaw-0.21.1-1.el9.tuxcare.els3.x86_64.rpm
    sha:81facb4c170f4425ce054d00a276804b323ae7aa0b40e79bd4b3d857fb4995cd
  • LibRaw-devel-0.21.1-1.el9.tuxcare.els3.i686.rpm
    sha:5c7d951d5dfe20e956ef6d9f09010a4f1794c05f88ac76edf6a4b80fa4b4146e
  • LibRaw-devel-0.21.1-1.el9.tuxcare.els3.x86_64.rpm
    sha:d8ec1ba466baab2165236f59355f40761a31bfd43de082a6a53477ae28157090
  • LibRaw-samples-0.21.1-1.el9.tuxcare.els3.x86_64.rpm
    sha:c7ddccba12e4b0213fdd54da666154f179e7241eaa83d9303b016ee20e1396e0
  • LibRaw-static-0.21.1-1.el9.tuxcare.els3.x86_64.rpm
    sha:e31d7f519c1b11b1ff774419c640fc32f440a0ae6925b85cb9b4595ad7bf7b95
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.