(RHSA-2009:0011) Moderate: lcms security update

2009-01-0700:00:00

access.redhat.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

83.4%

JSON

Little Color Management System (LittleCMS, or simply “lcms”) is a
small-footprint, speed-optimized open source color management engine.

Multiple insufficient input validation flaws were discovered in LittleCMS.
An attacker could use these flaws to create a specially-crafted image file
which could cause an application using LittleCMS to crash, or, possibly,
execute arbitrary code when opened. (CVE-2008-5316, CVE-2008-5317)

Users of lcms should upgrade to these updated packages, which contain
backported patches to correct these issues. All running applications using
lcms library must be restarted for the update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat5i386lcms-devel< 1.15-1.2.2.el5_2.2lcms-devel-1.15-1.2.2.el5_2.2.i386.rpm
RedHat5s390lcms< 1.15-1.2.2.el5_2.2lcms-1.15-1.2.2.el5_2.2.s390.rpm
RedHat5x86_64lcms< 1.15-1.2.2.el5_2.2lcms-1.15-1.2.2.el5_2.2.x86_64.rpm
RedHat5ia64lcms-devel< 1.15-1.2.2.el5_2.2lcms-devel-1.15-1.2.2.el5_2.2.ia64.rpm
RedHat5ppclcms< 1.15-1.2.2.el5_2.2lcms-1.15-1.2.2.el5_2.2.ppc.rpm
RedHat5srclcms< 1.15-1.2.2.el5_2.2lcms-1.15-1.2.2.el5_2.2.src.rpm
RedHat5i386lcms< 1.15-1.2.2.el5_2.2lcms-1.15-1.2.2.el5_2.2.i386.rpm
RedHat5x86_64lcms-devel< 1.15-1.2.2.el5_2.2lcms-devel-1.15-1.2.2.el5_2.2.x86_64.rpm
RedHat5s390xlcms< 1.15-1.2.2.el5_2.2lcms-1.15-1.2.2.el5_2.2.s390x.rpm
RedHat5ppclcms-devel< 1.15-1.2.2.el5_2.2lcms-devel-1.15-1.2.2.el5_2.2.ppc.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	i386	lcms-devel	< 1.15-1.2.2.el5_2.2	lcms-devel-1.15-1.2.2.el5_2.2.i386.rpm
RedHat	5	s390	lcms	< 1.15-1.2.2.el5_2.2	lcms-1.15-1.2.2.el5_2.2.s390.rpm
RedHat	5	x86_64	lcms	< 1.15-1.2.2.el5_2.2	lcms-1.15-1.2.2.el5_2.2.x86_64.rpm
RedHat	5	ia64	lcms-devel	< 1.15-1.2.2.el5_2.2	lcms-devel-1.15-1.2.2.el5_2.2.ia64.rpm
RedHat	5	ppc	lcms	< 1.15-1.2.2.el5_2.2	lcms-1.15-1.2.2.el5_2.2.ppc.rpm
RedHat	5	src	lcms	< 1.15-1.2.2.el5_2.2	lcms-1.15-1.2.2.el5_2.2.src.rpm
RedHat	5	i386	lcms	< 1.15-1.2.2.el5_2.2	lcms-1.15-1.2.2.el5_2.2.i386.rpm
RedHat	5	x86_64	lcms-devel	< 1.15-1.2.2.el5_2.2	lcms-devel-1.15-1.2.2.el5_2.2.x86_64.rpm
RedHat	5	s390x	lcms	< 1.15-1.2.2.el5_2.2	lcms-1.15-1.2.2.el5_2.2.s390x.rpm
RedHat	5	ppc	lcms-devel	< 1.15-1.2.2.el5_2.2	lcms-devel-1.15-1.2.2.el5_2.2.ppc.rpm