SUSE SLED15 / SLES15 Security Update : lcms2 (SUSE-SU-2018:3498-1)

This update for lcms2 fixes the following issues : CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet function in cmscgats.c, that could lead to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. bsc1108813 Note...

SUSE SLED12 / SLES12 Security Update : lcms2 (SUSE-SU-2018:3545-1)

This update for lcms2 fixes the following security issues : CVE-2016-10165: The TypeMLURead function allowed remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggered an out-of-bounds heap read bsc1021364. CVE-2018-16435...

SUSE-SU-2018:3545-1 Security update for lcms2

This update for lcms2 fixes the following security issues: - CVE-2016-10165: The TypeMLURead function allowed remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggered an out-of-bounds heap read bsc1021364. -...

openSUSE Security Update : lcms2 (openSUSE-2018-1327)

This update for lcms2 fixes the following issues : - CVE-2018-16435: Heap-based buffer overflow via a crafted file in the second argument to cmsIT8LoadFromFile bsc1108813 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE: Security Advisory for lcms2 (openSUSE-SU-2018:3529-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for lcms2 (moderate)

This update for lcms2 fixes the following issues: - CVE-2018-16435: Heap-based buffer overflow via a crafted file in the second argument to cmsIT8LoadFromFile bsc1108813 This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2018:3498-1 Security update for lcms2

This update for lcms2 fixes the following issues: - CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet function in cmscgats.c, that could lead to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. bsc1108813...

Ubuntu: Security Advisory (USN-3770-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : chromium-browser (RHSA-2018:3004)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:3004 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 70.0.3538.67. Security Fixes:...

Fedora 27 : lcms2 (2018-3e9f26489b)

Security fix for CVE-2018-16435 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora Update for lcms2 FEDORA-2018-3e9f26489b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for lcms2 FEDORA-2018-1cb4c4a6d8

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: lcms2-2.9-4.fc28

LittleCMS intends to be a small-footprint, speed optimized color management engine in open source form. LCMS2 is the current version of LCMS, and can be parallel installed with the original deprecated lcms...

Updated lcms2 packages fix security vulnerability

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. CVE-2018-16435...

USN-3770-1: Little CMS vulnerabilities

Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2016-10165 Quang Nguyen discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to execute...

Debian DLA-1496-1 : lcms2 security update

It was discovered that there was an integer overflow vulnerability in the 'Little CMS 2' colour management library. A specially crafted input file could lead to a heap-based buffer overflow. For Debian 8 'Jessie', this issue has been fixed in lcms2 version 2.6-3+deb8u2. We recommend that you...

[SECURITY] [DLA 1496-1] lcms2 security update

Package : lcms2 Version : 2.6-3+deb8u2 CVE ID : CVE-2018-16435 Debian Bug : 907983 It was discovered that there was an integer overflow vulnerability in the "Little CMS 2" colour management library. A specially-crafted input file could lead to a heap-based buffer overflow. For Debian 8 "Jessie",...

DLA-1496-1 lcms2 - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1496-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4284-1 : lcms2 - security update

Quang Nguyen discovered an integer overflow in the Little CMS 2 colour management library, which could result in denial of service and potentially the execution of arbitrary code if a malformed IT8 calibration file is processed. C Tenable Network Security, Inc. The descriptive text and package...