ELSA-2026-13284

ELSA-2026-13284 - LibRaw security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-05-05

Description

[0.19.5-6]
- Backport fix for CVE-2026-24660 from upstream
Resolves: RHEL-165412

[0.19.5-5]
- Backport fixes for CVE-2026-20889 and CVE-2026-21413 from upstream
- Migrate to SPDX license
Resolves: RHEL-165404, RHEL-165408

Related CVEs

CVE-2026-20889

CVE-2026-21413

CVE-2026-24660

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	LibRaw-0.19.5-6.el8_10.src.rpm	7afeb62fba1cf5f296ff52fcdb0b3d4575b8f3b3f6eded7cada96bf56e9ce44d	-	ol8_aarch64_appstream
	LibRaw-0.19.5-6.el8_10.src.rpm	7afeb62fba1cf5f296ff52fcdb0b3d4575b8f3b3f6eded7cada96bf56e9ce44d	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	LibRaw-0.19.5-6.el8_10.src.rpm	7afeb62fba1cf5f296ff52fcdb0b3d4575b8f3b3f6eded7cada96bf56e9ce44d	-	ol8_x86_64_appstream
	LibRaw-0.19.5-6.el8_10.src.rpm	7afeb62fba1cf5f296ff52fcdb0b3d4575b8f3b3f6eded7cada96bf56e9ce44d	-	ol8_x86_64_codeready_builder
	LibRaw-0.19.5-6.el8_10.i686.rpm	3519f6b5c33fc65691e5383c000b5f94b0ec44c01f4dc0200a5fba31e0265121	-	ol8_x86_64_appstream
	LibRaw-0.19.5-6.el8_10.x86_64.rpm	a3fadd98e74e0091179b9cc56faacda98a98aff07d1999f5f1ace4a0ca30cbdb	-	ol8_x86_64_appstream
	LibRaw-devel-0.19.5-6.el8_10.i686.rpm	fd40ce4eaef2ae1dc026a705897749cb3c003362d0a310f2c69908d1413f3ca9	-	ol8_x86_64_codeready_builder
	LibRaw-devel-0.19.5-6.el8_10.x86_64.rpm	36773582ab25cd33d57832e1728bbd9aabd20d68b3b11da5d7c4b0d1bc1b77e8	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team