lcms, python security update

CentOS Errata and Security Advisory CESA-2009:0011 Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System...

RHEL 5 : lcms (RHSA-2009:0011)

Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System LittleCMS, or simply 'lcms' is a small-footprint,...

Moderate: Red Hat Security Advisory: lcms security update

Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System LittleCMS, or simply "lcms" is a small-footprint,...

lcms security update

1.15-1.2.2.el52.2 - Fix Requires to ensure subpackages match the parent package 1.15-1.2.2.el52.1 - Fix insufficient input validation in ReadEmbeddedTextTag - Fix unsigned - signed integer cast issue in cmsAllocGamma - Resolves: 473469...

Debian Security Advisory DSA 1684-1 (lcms)

The remote host is missing an update to lcms announced via advisory DSA 1684-1. OpenVAS Vulnerability Test $Id: deb16841.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1684-1 lcms Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1684-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lcms multiple security vulnerabilities

Buffer overflow and integer overflow on images parsing...

[SECURITY] [DSA 1684-1] New lcms packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1684 [email protected] http://www.debian.org/security/ Devin Carraway December 10, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1684-1] New lcms packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1684 [email protected] http://www.debian.org/security/ Devin Carraway December 10, 2008 http://www.debian.org/security/faq -...

DSA-1684-1 lcms - multiple vulnerabilities

Bulletin has no description...

Debian DSA-1684-1 : lcms - multiple vulnerabilities

Two vulnerabilities have been found in lcms, a library and set of commandline utilities for image color management. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5316 Inadequate enforcement of fixed-length buffer limits allows an attacker to...

CVE-2008-5317

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-5317

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-5316

CVE-2008-5316 affects the LittleCMS color engine (lcms) prior to version 1.16. A buffer overflow is triggered in the ReadEmbeddedTextTag function (cmsio1.c) due to a length parameter inconsistency involving the input file. The impact is described as unknown in the provided document, and no exploi...

CVE-2008-5317

LittleCMS (lcms) vulnerability CVE-2008-5317: In cmsAllocGamma() of src/cmsgamma.c, integer signedness error before 1.17 can cause an under-allocated memory allocation when parsing a file with a specific number of entries. This could lead to memory corruption or related failures. Affected version...

USN-652-1: LittleCMS vulnerability

Chris Evans discovered that certain ICC operations in lcms were not correctly bounds-checked. If a user or automated system were tricked into processing an image with malicious ICC tags, a remote attacker could crash applications linked against liblcms1, leading to a denial of service, or possibl...

CVE-2007-2741

CVE-2007-2741 attests a stack-based buffer overflow in Little CMS (lcms) prior to 1.15. A crafted ICC profile embedded in a JPG can trigger remote code execution or cause an application crash/DoS. Affected software is Little CMS; root cause is a overflow in handling ICC profiles in JPEG input. Th...

atutor-151.txt

ATUTOR 1.5.1 possibly prior versions SQL INJECTION / ADMIN & USERS CREDENTIALS DISCLOSURE / INFORMATION DISCLOSURE / USER IMPERSONATION / REMOTE CODE EXECUTION software: site: http://www.atutor.ca/ description: "ATutor is an Open Source Web-based Learning Content Management System LCMS designed...