Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Fedora 9: 2010-4291 Critical Update: lcms DoS Buffer Overflow

fedora
Calendar Grey May 8, 2009
Dist Fedora Esm H88
The latest update for Fedora 9 lcms resolves the security vulnerability identified as CVE-2009-0793, implementing a patch designed to mitigate the risk of denial of service attacks.
CVE-2009-0793 The patch was given by lcms upstream on the lcms announce mailing list

Summary

LittleCMS intends to be a small-footprint, speed optimized color management

engine in open source form.

Update Information:

CVE-2009-0793 The patch was given by lcms upstream on the lcms announce mailing list. % 40littlecms.com

Topics%20covered

Topics Covered

security advisory update buffer overflow critical Fedora DoS lcms

Change Log

* Wed Apr 22 2009 kwizart < kwizart at gmail.com > - 1.18-2 - Add lcms-CVE-2009-0793.patch from 1.18a * Mon Mar 23 2009 kwizart < kwizart at gmail.com > - 1.18-1 - Update to 1.18 (final) - Remove upstreamed patches - Disable autoreconf - patch libtool to prevent rpath issue * Fri Mar 20 2009 kwizart < kwizart at gmail.com > - 1.18-0.1.beta2 - Update to 1.18beta2 fix bug #487508: CVE-2009-0723 LittleCms integer overflow fix bug #487512: CVE-2009-0733 LittleCms lack of upper-bounds check on sizes fix bug #487509: CVE-2009-0581 LittleCms memory leak * Mon Mar 2 2009 kwizart < kwizart at gmail.com > - 1.17-10 - Fix circle dependency #452352 * Wed Feb 25 2009 Fedora Release Engineering - 1.17-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Thu Dec 4 2008 kwizart < kwizart at gmail.com > - 1.17-8 - Fix autoreconf and missing auxiliary files. * Sat Nov 29 2008 Ignacio Vazquez-Abrams - 1.17-7 - Rebuild for Python 2.6 * Tue Oct 28 2008 kwizart < kwizart at gmail.com > - 1.17-6 - Add lcms-fix_s390_lcms_h.patch - Fix #468245 * Tue Jun 3 2008 kwizart < kwizart at gmail.com > - 1.17-5 - Fix Array indexing error in ReadCurve - #448066

References


[ 1 ] Bug #492353 - CVE-2009-0793 lcms: Null pointer dereference (DoS) by handling transformations of monochrome profiles https://bugzilla.redhat.com/show_bug.cgi?id=492353

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update lcms' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: lcms
Product: Fedora 9
Version: 1.18
Release: 2.fc9
URL: https://www.littlecms.com/
Summary: Color Management System

Topics%20covered

Topics Covered

security advisory update buffer overflow critical Fedora DoS lcms

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here