-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4284-1 security@xxxxxxxxxx https://www.debian.org/security/ Moritz Muehlenhoff September 04, 2018 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : lcms2 CVE ID : CVE-2018-16435 Quang Nguyen discovered an integer overflow in the Little CMS 2 colour management library, which could in denial of service and potentially the execution of arbitrary code if a malformed IT8 calibration file is processed. For the stable distribution (stretch), this problem has been fixed in version 2.8-4+deb9u1. We recommend that you upgrade your lcms2 packages. For the detailed security status of lcms2 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/lcms2 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAluO824ACgkQEMKTtsN8 TjY/PA/8CjnYGSCTv6B/eQn3L4zyWveXihhwtkwOcUwn377hxfKDOkeWaD7zNDUz 2xXRiDklHmqLj+8f4anm11DT2A/rlMLF3vzzb3DAiMpKgj4ZHdOyqzge1dB3dpWz fZzbEN4kf8NPJzIlPKyW7y7l61ZnLI4XUUjAKPaqK69WKqSIXtlKS8GQGQ/N5Rfh 38rGmRh28Q6ZJKS/8ezvKIQB2KEv3D4/BapEXnvwPutmXcbBSSiEcq/fvP41yonE Ue8v3Dr9Dl3ekkzEoDth2X32PfA6Q175PBi4tmiw5bVGhNnfyEhRO3dNhGQzTbWJ Fd11hkaSPxwv4ltgbyRD4t1HgdQBptLkmv61Pclr3/WN5lb1XBeGO1cg+8MeHjJJ TwzhQvPGr7/KWtJyf6MQbpxh8c5PZ8ETayqQjYZE8mIqK0Z5oSk/Q/ZOLkG/kpcy dRW2WacHD6Xj1pdcUcQVw8RhFdU3fQ9kL/8kCXqkp4A5I2t5vbyL8kpjrkOuXKZp RBBR4MDd6LbRZ67obD4uJd3vkrt/sxB1SpOsqa9XqMfLJikpRx1Jk75xn0Ua0ZP/ gI7u2OgGAial1YPjSg8vhw9VBeqYCrMfIx71AGGgOPX/S/t7W1VshpdexNUMFCDO Dx2RQmjlWhJb/JVWxUJhKLLi07m/sxVFQB2DaLOTOqXBo/v5X+Q= =X8Yc -----END PGP SIGNATURE-----
