Backport upstream commit 233ae06 to fix CVE-2026-51235 in
LibRaw 0.21.1. The patch prevents integer overflows in image
size calculations and adds stricter dimension limits for
fuji-rotated images:
- Adds 8192-pixel width/height limits for fuji-rotated images
in identify.cpp.
- Wraps allocation size factors in INT64() casts in
raw2image.cpp to prevent 32-bit overflow.
- Uses UINT64() casts for malloc size in
phaseone_processing.cpp to prevent overflow.
CVE: CVE-2026-51235
Upstream patches:
- 233ae06de7.patch
Resolves: RHEL-219218
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
The Release was set to 3, so that this CentOS Stream 9 build (ie.,
LibRaw-0.21.1-3.el9) is considered newer than the corresponding RHEL 9.8
Z-stream build (ie., LibRaw-0.21.1-2.el9_8):
$ rpmdev-vercmp 0.21.1-2.el9 0.21.1-2.el9_8
0.21.1-2.el9 < 0.21.1-2.el9_8
$ rpmdev-vercmp 0.21.1-3.el9 0.21.1-2.el9_8
0.21.1-3.el9 > 0.21.1-2.el9_8
Resolves: RHEL-165375, RHEL-165464
