RHSA-2026:14224: CVEs fixed (Red Hat)

RHSA-2026:14224 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-21413 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit
• CVE-2026-20889 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d2031

Applies to

• RHEL 8.4 Advanced Mission Critical Update Support · fixed in LibRaw-0.19.5-2.el8_4.1
• RHEL 8.4 Extended Update Support Long-Life Add-On · fixed in LibRaw-0.19.5-2.el8_4.1

← Back to latest CVEs