Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 13.04/12.10/12.04 LTS USN-1911-1 Critical Little CMS Crash

ubuntu
Calendar Grey July 29, 2013
Scroller Ubuntu
Tiny CMS in Ubuntu may fail when handling specially designed files. Ensure you update your system to protect against this vulnerability.
Little CMS could be made to crash if it opened a specially crafted file.

Summary

Little CMS could be made to crash if it opened a specially crafted file.

Software Description:

- lcms2: Little CMS 2 color management library

Details:

It was discovered that Little CMS did not properly verify certain memory

allocations. If a user or automated system using Little CMS were tricked

into opening a specially crafted file, an attacker could cause Little CMS

to crash.

Topics%20covered

Topics Covered

security advisory critical Ubuntu memory issue crash lcms2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  liblcms2-2                      2.4-0ubuntu3.1

Ubuntu 12.10:
  liblcms2-2                      2.2+git20110628-2ubuntu4.1

Ubuntu 12.04 LTS:
  liblcms2-2                      2.2+git20110628-2ubuntu3.1

After a standard system update you need to restart any applications that
uses Little CMS to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1911-1

CVE-2013-4160

Severity
critical
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1911-1

Topics%20covered

Topics Covered

security advisory critical Ubuntu memory issue crash lcms2

Package Information

https://launchpad.net/ubuntu/+source/lcms2/2.4-0ubuntu3.1
https://launchpad.net/ubuntu/+source/lcms2/2.2+git20110628-2ubuntu4.1
https://launchpad.net/ubuntu/+source/lcms2/2.2+git20110628-2ubuntu3.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.