Nixpkgs security tracker

Permalink CVE-2026-24808

updated 5 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse dismissed 5 months, 2 weeks ago

A possible integer overflow vulnerability in RawTherapee/RawTherapee

Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc. This issue affects RawTherapee: through 5.11.

References

https://github.com/RawTherapee/RawTherapee/pull/7359 patch

Affected products

RawTherapee

=<5.11

Matching in nixpkgs

pkgs.rawtherapee

RAW converter and digital photo processing software

nixos-unstable 5.12
- nixpkgs-unstable 5.12
- nixos-unstable-small 5.12

Package maintainers

@jcumming Jack Cummings <jack@mudshark.org>
@2chilled Matthias Herrmann <matthias.mh.herrmann@gmail.com>

Current stable was never impacted

https://github.com/NixOS/nixpkgs/commit/aa15d7203d5413b163ad241a34918162818478e9

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.rawtherapee

Package maintainers