USN-7485-1

It was discovered that LibRaw could be made to read out of bounds. An attacker could possibly use this issue to cause applications using LibRaw to crash, resulting in a denial of service. (CVE-2025-43961, CVE-2025-43962, CVE-2025-43963, CVE-2025-43964)

References

https://ubuntu.com/security/notices/USN-7485-1

Affected packages

Ubuntu:Pro:16.04:LTS / libraw

Package

Name: libraw
Purl: pkg:deb/ubuntu/libraw@0.17.1-1ubuntu0.5+esm1?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.17.1-1ubuntu0.5+esm1

Affected versions

0.*

0.16.2-1

0.17.0-1

0.17.1-1

0.17.1-1ubuntu0.1

0.17.1-1ubuntu0.2

0.17.1-1ubuntu0.3

0.17.1-1ubuntu0.4

0.17.1-1ubuntu0.5

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libraw-bin",
            "binary_version": "0.17.1-1ubuntu0.5+esm1"
        },
        {
            "binary_name": "libraw15",
            "binary_version": "0.17.1-1ubuntu0.5+esm1"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "cves": [],
    "ecosystem": "Ubuntu:Pro:16.04:LTS"
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7485-1.json"

Ubuntu:Pro:18.04:LTS / libraw

Package

Name: libraw
Purl: pkg:deb/ubuntu/libraw@0.18.8-1ubuntu0.4+esm1?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.18.8-1ubuntu0.4+esm1

Affected versions

0.*

0.18.2-2

0.18.5-1

0.18.7-2

0.18.8-1

0.18.8-1ubuntu0.1

0.18.8-1ubuntu0.2

0.18.8-1ubuntu0.3

0.18.8-1ubuntu0.4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libraw-bin",
            "binary_version": "0.18.8-1ubuntu0.4+esm1"
        },
        {
            "binary_name": "libraw16",
            "binary_version": "0.18.8-1ubuntu0.4+esm1"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "cves": [],
    "ecosystem": "Ubuntu:Pro:18.04:LTS"
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7485-1.json"

Ubuntu:20.04:LTS / libraw

Package

Name: libraw
Purl: pkg:deb/ubuntu/libraw@0.19.5-1ubuntu1.4?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.19.5-1ubuntu1.4

Affected versions

0.*

0.19.5-1

0.19.5-1ubuntu1

0.19.5-1ubuntu1.1

0.19.5-1ubuntu1.2

0.19.5-1ubuntu1.3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libraw-bin",
            "binary_version": "0.19.5-1ubuntu1.4"
        },
        {
            "binary_name": "libraw19",
            "binary_version": "0.19.5-1ubuntu1.4"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map

{
    "cves": [],
    "ecosystem": "Ubuntu:20.04:LTS"
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7485-1.json"

Ubuntu:22.04:LTS / libraw

Package

Name: libraw
Purl: pkg:deb/ubuntu/libraw@0.20.2-2ubuntu2.22.04.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.20.2-2ubuntu2.22.04.2

Affected versions

0.*

0.20.2-1ubuntu3

0.20.2-2ubuntu1

0.20.2-2ubuntu2

0.20.2-2ubuntu2.22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libraw-bin",
            "binary_version": "0.20.2-2ubuntu2.22.04.2"
        },
        {
            "binary_name": "libraw20",
            "binary_version": "0.20.2-2ubuntu2.22.04.2"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map

{
    "cves": [],
    "ecosystem": "Ubuntu:22.04:LTS"
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7485-1.json"

Ubuntu:24.04:LTS / libraw

Package

Name: libraw
Purl: pkg:deb/ubuntu/libraw@0.21.2-2.1ubuntu0.24.04.1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.21.2-2.1ubuntu0.24.04.1

Affected versions

0.*

0.21.1-7ubuntu2

0.21.2-2

0.21.2-2.1

0.21.2-2.1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libraw-bin",
            "binary_version": "0.21.2-2.1ubuntu0.24.04.1"
        },
        {
            "binary_name": "libraw23t64",
            "binary_version": "0.21.2-2.1ubuntu0.24.04.1"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map

{
    "cves": [],
    "ecosystem": "Ubuntu:24.04:LTS"
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7485-1.json"