High ELSA-2026-11360 2 CVEs

Important: LibRaw security update (Oracle Linux 9)

Published Apr 28, 2026 · Updated Apr 28, 2026

Ecosystem: Oracle Linux

Summary

[0.21.1-2]
- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165373, RHEL-165456

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	LibRaw	0:0.21.1-2.el9_7
Oracle Linux · 9	LibRaw-devel	0:0.21.1-2.el9_7

Vulnerabilities 2

Critical 9.8

CVE-2026-21413

A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 …

LibRaw LibRaw kodi dcraw Debian Ubuntu Azure Linux Alpine

Apr 7, 2026
High 8.1

CVE-2026-24450

An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A …

LibRaw LibRaw kodi dcraw Debian Ubuntu Azure Linux Alpine

Apr 7, 2026