Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:3529-1

Опубликовано: 27 окт. 2018
Источник: suse-cvrf

Описание

Security update for lcms2

This update for lcms2 fixes the following issues:

  • CVE-2018-16435: Heap-based buffer overflow via a crafted file in the second argument to cmsIT8LoadFromFile (bsc#1108813)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
lcms2-2.9-lp150.2.3.1
liblcms2-2-2.9-lp150.2.3.1
liblcms2-2-32bit-2.9-lp150.2.3.1
liblcms2-devel-2.9-lp150.2.3.1
liblcms2-devel-32bit-2.9-lp150.2.3.1
liblcms2-doc-2.9-lp150.2.3.1

Ссылки

Описание

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Затронутые продукты
openSUSE Leap 15.0:lcms2-2.9-lp150.2.3.1
openSUSE Leap 15.0:liblcms2-2-2.9-lp150.2.3.1
openSUSE Leap 15.0:liblcms2-2-32bit-2.9-lp150.2.3.1
openSUSE Leap 15.0:liblcms2-devel-2.9-lp150.2.3.1
Ссылки