Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-57823 EUVD-2024-53767GHSA-4mjp-wj5r-mc96

In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_norm…

Published Jan 10, 2025 · Updated Nov 3, 2025 · Assigned by mitre

Vendor: librdf Product: Raptor RDF Syntax Library Package: raptor2 Package: raptor2 Package: raptor2 Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().

Affected products

VendorProductAffectedFixed
librdf Raptor RDF Syntax Library ≤ 2.0.16 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 raptor2 2.0.16-6 —
Debian 13 raptor2 2.0.16-6 —
Debian 12 raptor2 2.0.15-4+deb12u1 —
Debian 11 raptor2 2.0.14-1.2+deb11u1 DLA-4343-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 25.10 raptor2 2.0.16-4ubuntu1 —
Ubuntu 24.04 LTS raptor2 2.0.16-3ubuntu0.1 USN-7316-1
Ubuntu 22.04 LTS raptor2 2.0.15-0ubuntu4.1 USN-7316-1
Ubuntu 20.04 LTS raptor2 2.0.15-0ubuntu1.20.04.2 USN-7316-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS raptor2 2.0.14-1ubuntu0.18.04.1+esm1 USN-7869-1
Ubuntu Pro 16.04 LTS raptor2 2.0.14-1ubuntu0.16.04.1+esm1 USN-7869-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 raptor2 +1 2.0.15-32.el9_5 RHSA-2025:0312
RHEL 8 raptor2 +1 2.0.15-17.el8_10 RHSA-2025:0314
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS raptor2 +1 2.0.15-31.el9_4 RHSA-2025:0316
RHEL 9.2 EUS raptor2 +1 2.0.15-31.el9_2 RHSA-2025:0310
RHEL 9.0 E4S raptor2 2.0.15-31.el9_0 RHSA-2025:0311
RHEL 8.8 EUS raptor2 +1 2.0.15-17.el8_8 RHSA-2025:0318
RHEL 8.6 TUS raptor2 2.0.15-17.el8_6 RHSA-2025:0326
RHEL 8.6 E4S raptor2 2.0.15-17.el8_6 RHSA-2025:0326
RHEL 8.6 AUS raptor2 2.0.15-17.el8_6 RHSA-2025:0326
RHEL 8.4 TUS raptor2 2.0.15-17.el8_4 RHSA-2025:0313
RHEL 8.4 E4S raptor2 2.0.15-17.el8_4 RHSA-2025:0313
RHEL 8.4 AUS raptor2 2.0.15-17.el8_4 RHSA-2025:0313
RHEL 8.2 AUS raptor2 2.0.15-17.el8_2 RHSA-2025:0315
RHEL 7 ELS raptor2 +1 2.0.9-5.el7_9 RHSA-2025:0319

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 raptor2 +1 2.0.15-32.el9_5 ALSA-2025:0312
AlmaLinux 8 raptor2 +1 2.0.15-17.el8_10 ALSA-2025:0314

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 raptor2 2.0.15-32.el9_5 RLSA-2025:0312
Rocky Linux 8 raptor2 2.0.15-17.el8_10 RLSA-2025:0314

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 raptor 2.0.15-150200.9.18.1 SUSE-SU-2025:03244-1
SLES 15 SP6 raptor 2.0.15-150200.9.18.1 SUSE-SU-2025:03244-1
SLES 12 SP5 raptor 2.0.15-5.9.1 SUSE-SU-2025:03257-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed raptor 2.0.16-4.1 openSUSE-SU-2025:14646-1
openSUSE Leap 15.6 raptor 2.0.15-150200.9.18.1 SUSE-SU-2025:03244-1

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 raptor2 No fix yet —
Azure Linux 2 (CBL-Mariner) raptor2 No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 raptor2 +1 2.0.15-32.el9_5 ELSA-2025-0312
Oracle Linux 8 raptor2 +1 2.0.15-17.el8_10 ELSA-2025-0314
Oracle Linux 7 raptor2 +1 2.0.9-3.0.1.el7 ELSA-2025-0319

Advisories 24

References