X3F decoder: implemented hard single allocation limit via LIBRAW_X3F_ALLOC_LIMIT_MB...
authorAlex Tutubalin <lexa@lexa.ru>
Wed, 11 Mar 2026 08:57:24 +0000 (11:57 +0300)
committerGuilhem Moulin <guilhem@debian.org>
Wed, 29 Jul 2026 01:53:35 +0000 (03:53 +0200)
commita693e07b8e7d69f194802aca5b64bbda7578c6dc
tree1459f991ff4b3768b65381ccbb4c92a0c49564f2
parent88e2c9c0e682d60c075decf2ea290eb7e1680a7c
X3F decoder: implemented hard single allocation limit via LIBRAW_X3F_ALLOC_LIMIT_MB define; allocation size calculation converted to 64 bit arithm; fix for TALOS-2026-2359

Origin: https://github.com/LibRaw/LibRaw/commit/ac151a829b8d3e4c74fa3aefa8a029c3cc3f857f
Bug: https://talosintelligence.com/vulnerability_reports/TALOS-2026-2359
Bug-Debian: https://bugs.debian.org/1133845
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2026-24660

Gbp-Pq: Name CVE-2026-24660.patch
libraw/libraw_const.h
src/x3f/x3f_utils_patched.cpp