SUSE-SU-2026:3964-1

Опубликовано: 03 сент. 2026

Источник: suse-cvrf

Описание

Security update for lcms2

This update for lcms2 fixes the following issue:

CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).

lcms2-2.7-9.13.1

liblcms2-2-2.7-9.13.1

liblcms2-2-32bit-2.7-9.13.1

liblcms2-devel-2.7-9.13.1

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:lcms2-2.7-9.13.1

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:liblcms2-2-2.7-9.13.1

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:liblcms2-2-32bit-2.7-9.13.1

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:liblcms2-devel-2.7-9.13.1