Backport upstream commit 233ae06 to fix CVE-2026-51235 in
LibRaw 0.21.1. The patch prevents integer overflows in image
size calculations and adds stricter dimension limits for
fuji-rotated images:
- Adds 8192-pixel width/height limits for fuji-rotated images
in identify.cpp.
- Wraps allocation size factors in INT64() casts in
raw2image.cpp to prevent 32-bit overflow.
- Uses UINT64() casts for malloc size in
phaseone_processing.cpp to prevent overflow.
CVE: CVE-2026-51235
Upstream patches:
- 233ae06de7.patch
Resolves: RHEL-219218
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
