RHSA-2026:19345: Important: LibRaw security update

Published May 19, 2026

Updated

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).Security Fix(es): LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450) LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Libraw Libraw

Remediation

Event History

May 24, 2026

Advisory Published

via Red Hat·02:36 AM

Data Sourced

via Red Hat·02:36 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2026:19345?

The severity of RHSA-2026:19345 is categorized as Important.

What are the vulnerabilities addressed in RHSA-2026:19345?

RHSA-2026:19345 addresses vulnerabilities that allow arbitrary code execution through specially crafted malicious files.

How do I fix RHSA-2026:19345?

To fix RHSA-2026:19345, update to the patched version of LibRaw, specifically LibRaw-0.21.1-2.el9_8 or later.

What is CVE-2026-24450 in relation to RHSA-2026:19345?

CVE-2026-24450 is the specific identifier for the vulnerability that allows arbitrary code execution via a crafted file within LibRaw.

Which software is affected by RHSA-2026:19345?

The software affected by RHSA-2026:19345 is LibRaw.