LibRaw 0.21.4 Release is just published in our Github repository and this site download section.
Changes are:

• additional checks in PhaseOne correction tag 0x412 processing
• Do not apply canon metadata crop to DNG files
• Make sure the profile_length is the same size as the allocated memory.
• fix: remove duplicated supported camera
• check split_col/split_row values in phase_one_correct
• Prevent out-of-bounds read in fuji 0xf00c tag parser
• prevent OOB reads in phase_one_correct