Advisories » MGASA-2016-0303

Updated lcms2 packages fix security vulnerability

Publication date: 16 Sep 2016
Modification date: 08 Sep 2016
Type: security
Affected Mageia releases : 5

Description

An out-of-bounds read in cmstypes.c in Type_MLU_Read function was found,
leading to heap memory leak triggered by crafted ICC profile
(rhbz#1367357).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19243
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XXIGDG5IN54AHOOKCR6EFRN6MGRIFLXY/

SRPMS

5/core

• lcms2-2.6-3.1.mga5