Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

SUSE-SU-2026:1438-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2026:1438-1

SUSE-SU-2026:1438-1

UNKNOWN

Security update for libraw

Published Apr 17, 2026

Modified 2 days ago

Fix available

Details

This update for libraw fixes the following issues:

CVE-2026-20911: heap-based buffer overflow in HuffTable::initval(bsc#1261673).
CVE-2026-21413: heap-based buffer overflow in lossless_jpeg_load_raw (bsc#1261674).
CVE-2026-24660: heap-based buffer overflow in x3f_load_huffman (bsc#1261676).

Affected Packages

libraw

SUSE Linux Enterprise Workstation Extension 15 SP7

Fixed in:

0.18.9-150000.3.33.1

libraw16

SUSE Linux Enterprise Workstation Extension 15 SP7

Fixed in:

0.18.9-150000.3.33.1

References

https://bugzilla.suse.com/1261673

https://bugzilla.suse.com/1261674

https://bugzilla.suse.com/1261676

https://www.suse.com/security/cve/CVE-2026-20911

https://www.suse.com/security/cve/CVE-2026-21413

https://www.suse.com/security/cve/CVE-2026-24660

https://www.suse.com/support/update/announcement/2026/suse-su-20261438-1/

Upstream

CVE-2026-20911 CVE-2026-21413 CVE-2026-24660

Related

CVE-2026-20911 CVE-2026-21413 CVE-2026-24660

Ecosystems

SUSE Linux Enterprise Workstation Extension 15 SP7

Timeline

PublishedApr 17, 2026

ModifiedApr 17, 2026