< back to search

shield Security update for lcms2
SUSE-SLE-SERVER-12-SP3-2018-2512

This update for lcms2 fixes the following security issues: - CVE-2016-10165: The Type_MLU_Read function allowed remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggered an out-of-bounds heap read (bsc#1021364). - CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet function in cmscgats.c, that could lead to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. (bsc#1108813) - Ensure that LUT stages match channel count (bsc#1026649). - sanitize input and output channels on MPE profiles (bsc#1026650).

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 s390x
  • Packages
    lcms2
    Little CMS Engine - A color managment library and tools
    2.7-9.7.1
    lock rpm
    lock src
    liblcms2-2
    Libraries for the Little CMS Engine
    2.7-9.7.1
    lock rpm
    liblcms2-2-32bit
    Libraries for the Little CMS Engine
    2.7-9.7.1
    lock rpm
SUSE Linux Enterprise Server 12.3 aarch64
  • Packages
    lcms2
    Little CMS Engine - A color managment library and tools
    2.7-9.7.1
    lock rpm
    lock src
    liblcms2-2
    Libraries for the Little CMS Engine
    2.7-9.7.1
    lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le
  • Packages
    lcms2
    Little CMS Engine - A color managment library and tools
    2.7-9.7.1
    lock rpm
    lock src
    liblcms2-2
    Libraries for the Little CMS Engine
    2.7-9.7.1
    lock rpm
SUSE Linux Enterprise Server 12.3 x86_64
  • Packages
    lcms2
    Little CMS Engine - A color managment library and tools
    2.7-9.7.1
    lock rpm
    lock src
    liblcms2-2
    Libraries for the Little CMS Engine
    2.7-9.7.1
    lock rpm
    liblcms2-2-32bit
    Libraries for the Little CMS Engine
    2.7-9.7.1
    lock rpm