p PatchFirst

SUSE-SU-2026:4829-1

SUSE-SU-2026:4829-1 · Security update for libraw

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for libraw fixes the following issue: - CVE-2026-88387: incorrect numeric conversion in `LibRaw::parse_tiff_ifd()` when processing TIFF tag `0x00fe` can lead to undefined behavior and a process crash when a specially crafted file is processed (bsc#1282783).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • libraw SUSE:Linux Enterprise Module for Desktop Applications 15 SP7

    Affected ranges
    • ECOSYSTEM: < 0.21.1-150600.3.13.1

    Update to 0.21.1-150600.3.13.1

  • libraw SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 0.21.1-150600.3.13.1

    Update to 0.21.1-150600.3.13.1

  • libraw SUSE:Linux Enterprise Workstation Extension 15 SP7

    Affected ranges
    • ECOSYSTEM: < 0.21.1-150600.3.13.1

    Update to 0.21.1-150600.3.13.1

Original sources

Check your server →