Fedora 42: darktable 5.2.0 critical: buffer access and input validation
fedora
July 4, 2025
5.2.0 release
Summary
darktable manages your camera raw files and images in a database, lets you
view them through lighttable mode and develop/enhance them in darkroom mode.
Update Information:
5.2.0 release
Topics Covered
Change Log
* Sun Jun 22 2025 Germano Massullo
References
[ 1 ] Bug #2361345 - CVE-2025-43963 darktable: out-of-buffer access [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2361345
[ 2 ] Bug #2361363 - CVE-2025-43964 darktable: Improper Validation of Specified Quantity in Input in LibRaw [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2361363
[ 3 ] Bug #2361381 - CVE-2025-43962 darktable: Out-of-Bounds Read in LibRaw's phase_one_correct Function [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2361381
[ 4 ] Bug #2361408 - CVE-2025-43961 darktable: Out-of-Bounds Read in Fujifilm 0xf00c Tag Parser in LibRaw [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2361408
[ 5 ] Bug #2362561 - undefined symbol error in rawdenoise module while running darktable-cltest
https://bugzilla.redhat.com/show_bug.cgi?id=2362561
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a2b4be7d9b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: darktable
Product: Fedora 42
Version: 5.2.0
Release: 1.fc42
Summary: Utility to organize and develop raw images
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!