Red Hat Security Advisory

RHSA-2026:11360

LibRaw security update

Released 2026-04-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) LibRaw-0.21.1-2.el9_7
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) LibRaw-devel-0.21.1-2.el9_7

TI-2026-17301 CVE-2026-21413 · GHSA-g53g-r75r-95g5

MEDIUM 46

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01406 Published 2026-04-07 Partial fix CWE-129

TI-2026-19713 CVE-2026-24450 · GHSA-rhmw-w7w3-c647

MEDIUM 44

An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0059 Published 2026-04-07 Partial fix CWE-190