rpms/LibRaw
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Library for reading RAW files obtained from digital photo cameras
12 Commits 7 Branches 21 Tags 192 KiB
Diff 100%
aad4fe02a7
Go to file
RHEL Packaging Agent aad4fe02a7 Fix CVE-2026-51235: integer overflow in image size calculations 
Backport upstream commit 233ae06 to fix CVE-2026-51235 in
LibRaw 0.21.1. The patch prevents integer overflows in image
size calculations and adds stricter dimension limits for
fuji-rotated images:

- Adds 8192-pixel width/height limits for fuji-rotated images
  in identify.cpp.
- Wraps allocation size factors in INT64() casts in
  raw2image.cpp to prevent 32-bit overflow.
- Uses UINT64() casts for malloc size in
  phaseone_processing.cpp to prevent overflow.

CVE: CVE-2026-51235
Upstream patches:
 - 233ae06de7.patch
Resolves: RHEL-219218

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-07 08:19:31 +00:00
.gitignore Rebase to 0.21.1 2023-10-02 23:37:59 +02:00
9ab70f6dca19229cb5caad7cc31af4e7501bac93.patch Rebase to 0.21.1 2023-10-02 23:37:59 +02:00
gating.yaml enabling gating for el9 2021-06-16 13:34:00 +02:00
LibRaw-CVE-2026-21413-TALOS-2026-2331.patch Fix CVE-2026-21413 and CVE-2026-24450 2026-05-12 18:45:13 +02:00
LibRaw-CVE-2026-24450-TALOS-2026-2363.patch Fix CVE-2026-21413 and CVE-2026-24450 2026-05-12 18:45:13 +02:00
LibRaw-CVE-2026-51235.patch Fix CVE-2026-51235: integer overflow in image size calculations 2026-08-07 08:19:31 +00:00
LibRaw-pkgconfig.patch Rebase to 0.21.1 2023-10-02 23:37:59 +02:00
LibRaw.spec Fix CVE-2026-51235: integer overflow in image size calculations 2026-08-07 08:19:31 +00:00
sources Rebase to 0.21.1 2023-10-02 23:37:59 +02:00