UbuntuUpdates.org

Package "lcms2"

Name: lcms2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Little CMS 2 olor management library

Latest version: 2.5-0ubuntu4.2
Release: trusty (14.04)
Level: updates
Repository: universe

Links

Save this URL for the latest version of "lcms2": https://www.ubuntuupdates.org/lcms2



Other versions of "lcms2" in Trusty

Repository Area Version
base main 2.5-0ubuntu4
security main 2.5-0ubuntu4.2
security universe 2.5-0ubuntu4.2
updates main 2.5-0ubuntu4.2
PPA: LibreOffice 2.6-3ubuntu1~trusty1
PPA: Mint Import 2.6-3ubuntu1~trusty1
PPA: Mint Import 2.6-3ubuntu1~trusty1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.5-0ubuntu4.2 2018-09-20 11:06:47 UTC

  lcms2 (2.5-0ubuntu4.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2016-10165.patch: fix in src/cmstypes.c.
    - CVE-2016-10165
  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2018-16435.patch: fix in src/cmscgats.c.
    - CVE-2018-16435

 -- <email address hidden> (Leonidas S. Barbosa) Wed, 19 Sep 2018 11:46:00 -0300

Source diff to previous version
CVE-2016-10165 The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of servi
CVE-2018-16435 Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based bu

Version: 2.5-0ubuntu4.1 2016-05-04 21:07:04 UTC

  lcms2 (2.5-0ubuntu4.1) trusty-security; urgency=medium

  * SECURITY UPDATE: double free in DefaultICCintents()
    - debian/patches/CVE-2013-7455.patch: ensure that the variable Lut
      is freed only once.
    - CVE-2013-7455

 -- Steve Beattie <email address hidden> Mon, 02 May 2016 11:54:40 -0700

CVE-2013-7455 RESERVED



About   -   Send Feedback to @ubuntu_updates