Skip to content
OpenAdvisories
Unscored RHSA-2009:0011 2 CVEs

Red Hat Security Advisory: lcms security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client lcms 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client lcms-debuginfo 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client python-lcms 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation lcms 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation lcms-debuginfo 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation lcms-devel 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server lcms 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server lcms-debuginfo 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server lcms-devel 0:1.15-1.2.2.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server python-lcms 0:1.15-1.2.2.el5_2.2

Vulnerabilities 2

  • Unscored —
    CVE-2008-5316

    Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 a…

  • Unscored —
    CVE-2008-5317

    Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=473462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=473463
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0011.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-5316
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5316
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5316
  • report
    https://access.redhat.com/security/cve/CVE-2008-5317
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5317
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5317