p PatchFirst

SUSE-SU-2025:01572-1

SUSE-SU-2025:01572-1 · Security update for libraw

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for libraw fixes the following issues: - CVE-2025-43961: Fixed out-of-bounds read in the Fujifilm 0xf00c tag parser in metadata/tiff.cpp (bsc#1241643) - CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct function (bsc#1241585) - CVE-2025-43963: Fixed out-of-buffer access during phase_one_correct in decoders/load_mfbacks.cpp (bsc#1241642) - CVE-2025-43964: Fixed tag 0x412 processing in phase_one_correct does not enforce minimum w0 and w1 values (bsc#1241584)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • libraw SUSE:Linux Enterprise Module for Desktop Applications 15 SP7

    Affected ranges
    • ECOSYSTEM: < 0.21.1-150600.3.5.1

    Update to 0.21.1-150600.3.5.1

  • libraw SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 0.21.1-150600.3.5.1

    Update to 0.21.1-150600.3.5.1

  • libraw SUSE:Linux Enterprise Workstation Extension 15 SP7

    Affected ranges
    • ECOSYSTEM: < 0.21.1-150600.3.5.1

    Update to 0.21.1-150600.3.5.1

Original sources

Check your server →