Gyorgy Sarvari 7f49deaf7e

libraw: mark CVE-2026-20911 and CVE-2026-21413 patched ...

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-20911
https://nvd.nist.gov/vuln/detail/CVE-2026-21413

Both CVEs are tracked with incorrect version info: NVD indicates that
0.22.1 is explicitly vulnerable, but the fixes are actually included
in this release.

Relevant commits:
CVE-2026-20911: 5357bb5fc6
CVE-2026-21413: 75ed2c12a3

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>

2026-04-20 07:35:35 -07:00

..

libraw_0.22.1.bb

libraw: mark CVE-2026-20911 and CVE-2026-21413 patched

2026-04-20 07:35:35 -07:00