RHSA-2026:14655: CVEs fixed (Red Hat)

RHSA-2026:14655 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-21413 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit
• CVE-2026-20889 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d2031

Applies to

• RHEL 8.6 Advanced Mission Critical Update Support · fixed in LibRaw-0.19.5-3.el8_6.1
• RHEL 8.6 Telecommunications Update Service · fixed in LibRaw-0.19.5-3.el8_6.1

← Back to latest CVEs