Red Hat Security AdvisoryRHSA-2009:0011
lcms security update
Released 2009-01-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) lcms-1.15-1.2.2.el5_2.2, lcms-1.15-1.2.2.el5_2.2.i386, lcms-1.15-1.2.2.el5_2.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) lcms-1.15-1.2.2.el5_2.2, lcms-1.15-1.2.2.el5_2.2.i386, python-lcms-1.15-1.2.2.el5_2.2 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) lcms-1.15-1.2.2.el5_2.2, lcms-devel-1.15-1.2.2.el5_2.2, lcms-devel-1.15-1.2.2.el5_2.2.i386
Fixes 2 records
Priority MEDIUM 48
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency inv…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02779 · Published 2008-12-03 · Fixed CWE-119
Priority MEDIUM 47
Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" va…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02162 · Published 2008-12-03 · Fixed CWE-189
