Security update for raptor

This update for raptor fixes the following issues: CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673 CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674 Patch Instructions: To install this SUSE update use...

CVE-2022-28101

Turtlapp Turtle Note v0.7.2.6 does not filter the tag during markdown parsing, allowing attackers to execute HTML injection...

OESA-2025-1453 raptor2 security update

Raptor is Redland's RDF parser toolkit, which provides a set of independent RDF parsers to generate triples from RDF / XML or N-Triples. Security Fixes: In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in...

RLSA-2025:0312 Important: raptor2 security update

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fixes: raptor: integer underflow when normalizing a URI with the turtle parser CVE-2024-57823 For more details about the security issues, including th...

Advisory ROSA-SA-2025-2761

Software: raptor2 2.0.9 OS: rosa-server79 packageevrstring: raptor2-2.0.9-3.0.1.res7 CVE-ID: CVE-2024-57823 BDU-ID: None CVE-Crit: CRITICAL. CVE-DESC.: An integer overflow vulnerability was discovered in the Raptor RDF Syntax Library when normalizing URIs using the turtle parser in the...

tinysparql:fuzz_rdf_turtle: Heap-buffer-overflow in parse_token

Project: https://gitlab.gnome.org/GNOME/tinysparql.git Detailed Report: https://oss-fuzz.com/testcase?key=5310066693832704 Project: tinysparql Fuzzing Engine: libFuzzer Fuzz Target: fuzzrdfturtle Job Type: libfuzzerasantinysparql Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

tinysparql:fuzz_rdf_trig: Crash in tracker_deserializer_turtle_next

Project: https://gitlab.gnome.org/GNOME/tinysparql.git Detailed Report: https://oss-fuzz.com/testcase?key=6237853684400128 Project: tinysparql Fuzzing Engine: libFuzzer Fuzz Target: fuzzrdftrig Job Type: libfuzzerasantinysparql Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

tinysparql:fuzz_rdf_turtle: Heap-buffer-overflow in terminal_STRING_LITERAL1

Project: https://gitlab.gnome.org/GNOME/tinysparql.git Detailed Report: https://oss-fuzz.com/testcase?key=5828042551525376 Project: tinysparql Fuzzing Engine: honggfuzz Fuzz Target: fuzzrdfturtle Job Type: honggfuzzasantinysparql Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

MGASA-2025-0018 Updated raptor2 packages fix security vulnerability

In the Raptor RDF Syntax Library there is an integer underflow when normalizing a URI with the turtle parser in raptorurinormalizepath...

Updated raptor2 packages fix security vulnerability

In the Raptor RDF Syntax Library there is an integer underflow when normalizing a URI with the turtle parser in raptorurinormalizepath...

RLSA-2025:0314 Important: raptor2 security update

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fixes: raptor: integer underflow when normalizing a URI with the turtle parser CVE-2024-57823 For more details about the security issues, including th...

raptor2 security update

An update is available for raptor2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Raptor is the RDF Parser Toolkit for Redland that provides a set of standalon...

raptor: integer underflow when normalizing a URI with the turtle parser

A flaw was found in the Raptor RDF syntax library librdf. An integer underflow condition may be triggered when normalizing a URI with the turtle parser. This issue could cause memory corruption or an application crash, leading to a denial of service or other undefined behavior...

Important: Red Hat Security Advisory: raptor2 security update

An update for raptor2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Oracle Linux 9 : raptor2 (ELSA-2025-0312)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0312 advisory. 2.0.15-32 - Bump NVR 2.0.15-31 - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser Tenable has extracted the preceding...

Oracle Linux 8 : raptor2 (ELSA-2025-0314)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0314 advisory. 2.0.15-17 - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser Tenable has extracted the preceding description block...

RHEL 8 : raptor2 (RHSA-2025:0326)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0326 advisory. Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security...

raptor: integer underflow when normalizing a URI with the turtle parser

A flaw was found in the Raptor RDF syntax library librdf. An integer underflow condition may be triggered when normalizing a URI with the turtle parser. This issue could cause memory corruption or an application crash, leading to a denial of service or other undefined behavior...

raptor: integer underflow when normalizing a URI with the turtle parser

A flaw was found in the Raptor RDF syntax library librdf. An integer underflow condition may be triggered when normalizing a URI with the turtle parser. This issue could cause memory corruption or an application crash, leading to a denial of service or other undefined behavior...

Important: Red Hat Security Advisory: raptor2 security update

An update for raptor2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...