Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

openSUSE Security Update: Moderate Vulnerability in libraw 2025:1568-1

opensuse
Calendar Grey May 16, 2025
Dist Opensuse Esm H88
A patch for libjpeg resolves significant vulnerabilities in Fedora, offering guidance to enhance protection.
An update that solves four vulnerabilities can now be installed.

Description

This update for libraw fixes the following issues:

* CVE-2025-43961: Fixed out-of-bounds read in the Fujifilm 0xf00c tag parser

in metadata/tiff.cpp (bsc#1241643)

* CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in

phase_one_correct function (bsc#1241585)

* CVE-2025-43963: Fixed out-of-buffer access during phase_one_correct in

decoders/load_mfbacks.cpp (bsc#1241642)

* CVE-2025-43964: Fixed tag 0x412 processing in phase_one_correct does not

enforce minimum w0 and w1 values (bsc#1241584)

Topics%20covered

Topics Covered

security advisory moderate out-of-bounds openSUSE libraw buffer access

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch SUSE-2025-1568=1

Package List

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)

* libraw-tools-0.20.2-150400.3.16.1

* libraw-devel-static-0.20.2-150400.3.16.1

* libraw20-0.20.2-150400.3.16.1

* libraw-debugsource-0.20.2-150400.3.16.1

* libraw-tools-debuginfo-0.20.2-150400.3.16.1

* libraw-devel-0.20.2-150400.3.16.1

* libraw20-debuginfo-0.20.2-150400.3.16.1

* openSUSE Leap 15.4 (x86_64)

* libraw20-32bit-debuginfo-0.20.2-150400.3.16.1

* libraw20-32bit-0.20.2-150400.3.16.1

* openSUSE Leap 15.4 (aarch64_ilp32)

* libraw20-64bit-debuginfo-0.20.2-150400.3.16.1

* libraw20-64bit-0.20.2-150400.3.16.1

References

* bsc#1241584

* bsc#1241585

* bsc#1241642

* bsc#1241643

## References:

* https://www.suse.com/security/cve/CVE-2025-43961.html

* https://www.suse.com/security/cve/CVE-2025-43962.html

* https://www.suse.com/security/cve/CVE-2025-43963.html

* https://www.suse.com/security/cve/CVE-2025-43964.html

* https://bugzilla.suse.com/show_bug.cgi?id=1241584

* https://bugzilla.suse.com/show_bug.cgi?id=1241585

* https://bugzilla.suse.com/show_bug.cgi?id=1241642

* https://bugzilla.suse.com/show_bug.cgi?id=1241643

Announcement ID: SUSE-SU-2025:1568-1
Release Date: 2025-05-16T13:42:53Z
Affected Products: * openSUSE Leap 15.4

Topics%20covered

Topics Covered

security advisory moderate out-of-bounds openSUSE libraw buffer access

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here